AIKIDO-2026-10729

TL;DR

An internal identifier used to keep vm2’s private state out of guest reach could still be referenced through computed property access on globalThis. That exposes a privileged name and weakens the separation between guest-visible globals and implementation details. Attackers can use it as a gadget in larger exploit chains. The implementation moves the binding out of globalThis reach so computed-key access cannot recover it.