Lumiverse versions before 0.9.7 contain a vulnerability in the component override system where user-supplied TSX code is transpiled and evaluated using new Function with shadowed dangerous globals. The static validator blocks dangerous identifiers via regex, but this can be bypassed by reconstructing identifiers from string fragments at runtime. Additionally, sandbox escape is possible by leveraging useRef and useEffect hooks to obtain a live DOM node and then accessing the real window object through the node's ownerDocument.defaultView property. Malicious theme packs (.lumitheme or .lumiverse-theme) can exploit this by delivering payloads that execute in the victim's authenticated session once imported and enabled. This vulnerability is addressed in version 0.9.7.

Successful exploitation allows an attacker to execute arbitrary code in the context of an authenticated user session of Lumiverse, leading to complete compromise of confidentiality and integrity of user data. The vulnerability does not impact availability. The CVSS score is 9.3 (critical), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality and integrity.

This vulnerability is fixed in Lumiverse version 0.9.7. Users and administrators should upgrade to version 0.9.7 or later to remediate this issue. No official patch links or vendor advisory content are provided, but the fix is confirmed in the version history. Until upgrading, avoid importing or enabling untrusted theme packs to reduce risk.