Escaping the Matrix: A Deep Dive into SandboxJS RCE (CVE-2026–23830)

How a simple oversight in AsyncFunctions led to a full Remote Code Execution (RCE) via Sandbox Escape.