vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks

🗓️ 01 Oct 2026 15:42:15Reported by GitHub Advisory DatabaseType

vm2 allows sandbox code to override host WebStream state checks via internal symbols.

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerabilities in the scripts of lib/setup-sandbox.js and lib/bridge.js, located in the vm2 package manager’s library, allow attackers to compromise the integrity of protected information.	22 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-92952	1 Oct 202615:42	–	circl
CVE	CVE-2026-92952	17 Sep 202613:46	–	cve
Cvelist	CVE-2026-92952 vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypass	17 Sep 202613:46	–	cvelist
EUVD	EUVD-2026-81601	1 Oct 202615:42	–	euvd
Github Security Blog	Duplicate Advisory: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks	17 Sep 202615:32	–	github
NVD	CVE-2026-92952	17 Sep 202614:18	–	nvd
OSV	CLSA-2026-1790888247 TuxCare security update for vm2 (15 CVEs)	1 Oct 202620:57	–	osv
OSV	GHSA-JF8Q-945G-9Q4C vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks	1 Oct 202615:42	–	osv
Patchstack	NPM: vm2: Incomplete nodejs.* symbol filtering lets sandbox override host WebStream state checks	1 Oct 202615:42	–	patchstack

Vulners

Node

vm2_project vm2Range3.11.4–3.11.6npm

Source	Link
github	www.github.com/patriksimek/vm2/security/advisories/GHSA-jf8q-945g-9q4c
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-92952
github	www.github.com/patriksimek/vm2/commit/a45444d5abbdfa59055528f584df5f21cc7c42da
github	www.github.com/patriksimek/vm2/releases/tag/v3.11.7
vulncheck	www.vulncheck.com/advisories/vm2-3.11.4-through-3.11.6-sandbox-symbol-filtering-bypass
github	www.github.com/advisories/GHSA-jf8q-945g-9q4c

01 Oct 2026 15:42Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.16.8

CVSS 48.9

EPSS0.00461

SSVC