Grist Sandbox Bug Lets Spreadsheets Run Code

A critical vulnerability dubbed CVE-2026-24002 exposes a powerful attack vector through a Grist sandbox bug, according to researchers at Cyera Research Labs. The flaw in the Grist-Core platform allows malicious spreadsheet formulas to bypass sandbox protections, opening the door to remote code execution (RCE). Attackers could weaponize seemingly harmless spreadsheets to compromise entire systems.

This zero-day exploit represents a new and alarming escalation in the misuse of collaborative spreadsheet tools in business environments. Once triggered, the vulnerability enables attackers to gain unfiltered access to host systems, potentially affecting organization-wide data integrity and security.

The flaw joins a growing list of high-severity bugs identified in recent months, including CVE-2026-23830, CVE-2026-24765 and CVE-2026-24858. Security professionals must act quickly to assess and remediate risks associated with the Grist sandbox bug before additional exploits emerge in the wild.

To read the full report, visit the official source:

CVE-2026-24002: Critical Sandbox Escape Turns Grist Spreadsheets into RCE Weapons