CVE-2024-23682 describes a trust boundary violation in Artemis Java Test Sandbox versions prior to 1.8.0. The vulnerability arises when an attacker supplies class files within a package that the sandbox (Ares) trusts, allowing the attacker to bypass sandbox restrictions and execute arbitrary Java code. This effectively breaks the sandbox containment and can lead to full compromise of the execution environment. The CVSS v3.1 base score is 8.2, indicating high severity, with attack vector local, low attack complexity, low privileges required, and user interaction needed. The impact includes complete confidentiality, integrity, and availability compromise.

Successful exploitation allows an attacker to escape the Java sandbox and execute arbitrary code with the privileges of the sandboxed process. This can lead to full system compromise, including unauthorized access to sensitive data, modification of system state, and denial of service.

No official patch or fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid running untrusted code in the affected sandbox versions. Monitor vendor channels for updates and apply patches promptly once released.