Skip to content
OpenAdvisories
Critical WID-SEC-2026-1583 11 CVEs

vm2: Mehrere Schwachstellen

Published May 18, 2026 · Updated Oct 27, 2026 · Revision 8 · de-DE

Vendor: Red Hat Product: Enterprise Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.

Product

vm2 ist eine Sandbox, in der nicht vertrauenswürdiger Code der in Node integrierten Module ausgeführt werden kann.

Vulnerabilities 11

  • Critical 10.0
    CVE-2026-47131

    vm2: Sandbox Escape

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, "__proto__"), Buffer.call.call({}.__lookupSetter__, Buffer, "__proto__"), and Node.js's ERR_INVALID_ARG_TYPE Error, the host's Ty…

    patriksimek vm2 vm2 npm
  • Critical 10.0
    CVE-2026-47137

    vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCE

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the combination nesting: true + require: false. However, the check uses strict equalit…

    patriksimek vm2 vm2 npm
  • Critical 10.0
    CVE-2026-47140

    vm2: NodeVM builtin denylist bypass via process and inspector/promises allows host code execution

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangerous Node.js builtins such as module, worker_threads, cluster, vm, repl, and inspector. However, the denylist misses process and inspector/promises. Both can be …

    patriksimek vm2 vm2 npm
  • Critical 10.0
    CVE-2026-47208

    vm2: Sandbox Breakout Using Promise Species

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue h…

    patriksimek vm2 vm2 npm
  • Critical 10.0
    CVE-2026-92956 Public exploit

    vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming

    vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26. WebAssembly.compileStreaming and WebAssembly.instantiateStreaming can produce a raw host-realm Promise that rejects with a host…

    patriksimek vm2 vm2 npm
  • Critical 9.8
    CVE-2026-47210

    vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbitrary code execution in the host process when untrusted code is executed with async support on runtimes exposing WebAssembly JSPI (WebAssem…

    patriksimek vm2 vm2 npm
  • High 8.7
    CVE-2026-47135

    vm2: Sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Combined with the bridge's set/defineProperty/deleteProperty traps having no isDangero…

    patriksimek vm2 vm2 npm
  • High 8.6
    CVE-2026-47139

    vm2: NodeVM network builtin exclusions bypass via internal _http_client and _http_server

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM supports excluding public network builtins from the wildcard builtin option. With this configuration direct access to http, https, http2, net, dgram, tls, dns, and dns/promises is b…

    patriksimek vm2 vm2 npm
  • High 8.6
    CVE-2026-47209

    vm2: Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target object. Per the Proxy set trap specification, when receiver !…

    patriksimek vm2 vm2 npm
  • Medium 6.9
    CVE-2026-47141

    vm2: NodeVM observability builtins leak host process and HTTP request data

    vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM exposes some process-wide observability builtins when they are allowed through require.builtin. The diagnostics_channel, async_hooks, and perf_hooks builtins are not blocked by the …

    patriksimek vm2 vm2 npm
  • Low 2.1
    CVE-2026-92962

    vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

    vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment (lines[lines.length] = value) …

    patriksimek vm2 vm2 npm

Revision history

  1. #8

    Neue Updates von Red Hat aufgenommen

  2. #7

    Neue Updates von Red Hat aufgenommen

  3. #6

    Neue Updates von Red Hat aufgenommen

  4. #5

    Referenz(en) aufgenommen: CVE-2026-92956, EUVD-2026-81605, CVE-2026-92962, EUVD-2026-81612

  5. #4

    Neue Updates von Red Hat aufgenommen

  6. #3

    Neue Updates von Red Hat aufgenommen

  7. #2

    Referenz(en) aufgenommen: EUVD-2026-36443, EUVD-2026-36440, EUVD-2026-36449, EUVD-2026-36448, EUVD-2026-36446, EUVD-2026-36444, EUVD-2026-36441, EUVD-2026-36447, EUVD-2026-36442

  8. #1

    Initiale Fassung

References