CVE-2026-93605

A flaw was found in vm2. The sandbox environment fails to restrict access to the childprocess module, which handles system command execution. In environments configured to allow built-in modules, an attacker capable of running untrusted code within the sandbox can load this module to break...