CVE-2023-30547

CVE-2023-30547 VM2 サンドボックスエスケープ脆弱性の PoC エクスプロイト alt img 説明 vm2 3.9.17 は、例外のサニタイズ処理における欠陥により、任意のコード実行に対して脆弱です。攻撃者は、handleException 内でサニタイズされていないホスト例外をトリガーすることでこれを悪用し、サンドボックスから脱出してホストコンテキストで任意のコードを実行できます。 VM2-Exploit ⚠️ 「VM2-Exploit 」ツールの使用を検討してください。このツールは すべてのバージョン の VM2 を悪用でき、簡単に使用できます。...

CVE-2023-30547

CVE-2023-30547 脆弱性の説明 vm2は、ホワイトリストに登録されたNodeの組み込みモジュールを使用して信頼できないコードを実行できるサンドボックスです。vm2のバージョン3.9.16までの例外サニタイズに脆弱性が存在し、攻撃者が handleException 内でサニタイズされていないホスト例外を発生させることができ、これによりサンドボックスをエスケープしてホストコンテキストで任意のコードを実行できる可能性があります。 CVE-2023-30547.py このツールは、脆弱性を調査するために使用できるシンプルなPythonスクリプトです。4つのモードがあります：...

CVE-2026-92934

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

EUVD-2026-81584

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

CVE-2026-92934 vm2 before 3.11.8 Sandbox Escape RCE via AggregateError

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

CVE-2026-92934 vm2 before 3.11.8 Sandbox Escape RCE via AggregateError

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

CVE-2026-92934 vm2 before 3.11.8 Sandbox Escape RCE via AggregateError

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

CVE-2026-92934

vm2 (a Node.js sandbox library) versions before 3.11.8 contain an incomplete fix for Error.cause sanitization . When a host-wrapped AggregateError object is revisited within a single exception handler traversal in handleException, the cycle detection bypass allows access to unsanitized host proxi...

CVE-2026-92934: Protection Mechanism Failure

vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError objects are caught within a single exception handler traversal. Attackers can exploit cycle detection bypass in handleException to access unsanitized hos...

Arbitrary Code Injection

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection through the handleException function, which fails to sanitize the .cause property of errors. An attacker can gain access to...

Arbitrary Code Injection

Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection through the handleException function, which fails to sanitize the .cause property of errors. An attacker can...

CVE-2026-47686: Protection Mechanism Failure

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process...

Arbitrary Code Injection

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection via the handleException function and the sandbox-side globalPromise.prototype.then wrapper in lib/setup-sandbox.js. An...

The vulnerability of the handleException() function in the vm2 package manager’s library exists because measures to neutralize special elements are not taken. This allows a malicious user to exit from a isolated programming environment and execute arbitrary code.

The vulnerability of the handleException function in the vm2 package manager’s library exists because measures to neutralize special elements are not taken. Exploiting this vulnerability can allow a remote attacker to exit from a isolated programming environment and execute arbitrary code...

GHSA-CH3R-J5X3-6Q2M vm2 Sandbox Escape vulnerability

There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException which can be used to escape the sandbox and run arbitrary code in host context. Impact A threat actor can bypass the sandbox...

Arbitrary Code Injection

vm2 is vulnerable to Code Injection. The vulnerability exists due to lack of exception sanitization in the handleException function which allows an attacker to inject and execute malicious code and break out of the sandboxed enviroment...

Arbitrary Code Execution

vm2 is vulnerable to Arbitrary Code Execution. The vulnerability exists because the transformer function of transformer.js allows remote attackers to bypass handleException and leak unsanitized host exceptions to escape the sandbox and run arbitrary code in the host context...

PT-2023-2417

Name of the Vulnerable Software and Affected Versions vm2 versions up to 3.9.16 Description The issue exists due to inadequate sanitization of special elements in the handleException function of the vm2 library, allowing a remote attacker to escape the sandbox and execute arbitrary code in the ho...

vm2 安全漏洞

vm2 is an advanced virtual machine/sandbox for Node.js by individual developer Patrik Simek in the Czech Republic. to run untrusted code using whitelisted Node built-in modules. A security vulnerability exists in vm2 version 3.9.15 and earlier. An attacker exploits this vulnerability to bypass...