AIKIDO-2026-10727

TL;DR

The code transformer’s fast path can be bypassed using with, internal state naming, and certain unicode-escaped identifier shapes. That exposes a privileged internal state name to guest-transformed code. Attackers use that exposure as a pivot into broader sandbox weaknesses. The transformer and identifier handling are hardened so internal state cannot be reached through these syntax tricks.