cyfenced.com →

[ CVE-2026-92950 · Published 17 Sep 2026 ]

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

CVSS 8.6 EPSS <1%Fix available

[ Why it matters ]Priority signals

  • Public proof-of-concept exploit exists (CISA SSVC)

[ Description ]Official description

vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses require(__filename) to re-execute itself in the host realm, bypassing sandbox isolation and accessing host modules like fs and child_process.

[ Fixes ]Fixes and patches

  • vm2 3.11.7Fixed version · GitHub Advisories · npm package vm2: upgrade to 3.11.7 or later (affected <= 3.11.6)

[ Packages ]Affected open-source packages

[ References ]References