CVE-2026-44643: Sandbox Escape and Remote Code Execution in angular-expressions Vulnerability ID: CVE-2026-44643 CVSS Score: 9.3 Published: 2026-05-11 CVE-2026-44643 is a critical sandbox escape vulnerability in the peerigon/angular-expressions library. The flaw permits unauthenticated remote code execution via prototype traversal and improper validation of filter expressions. By crafting specific malicious inputs, attackers can access the global Function constructor. TL;DR A critical sandbox escape in angular-expressions < 1.5.2 allows RCE via prototype traversal in malicious filter definitions.…