An issue exists in the apply trap of the bridge (lib/bridge.js) where a nullish `this` receiver is not correctly handled. When sandboxed code invokes a host-provided non-strict (sloppy-mode) function without a receiver, the undefined receiver is passed to the host call. V8 then substitutes the host realm's global object for `this`, which vm2 wraps and returns to the sandbox. This provides the sandboxed script with a live proxy of the host global, enabling a complete sandbox escape. An attacker can access the `process` object to execute arbitrary code or commands on the host, such as using `process.getBuiltinModule('child process').execSync`. This requires the embedding application to expose at least one non-strict host function to the sandbox; strict-mode and ES module host functions are not affected.