CVE-2026-27495

CVE-2026-27495 — n8n JS Task Runner Sandbox Escape Sandbox escape on n8n JavaScript Task Runner via host-realm object leak. | ---|--- CVE| CVE-2026-27495 CVSS| 9.4 Critical CWE| CWE-94 — Code Injection Affected| n8n 1.123.22 / 2.0.0–2.9.2 / 2.10.0 Fixed| 1.123.22 / 2.9.3 / 2.10.1 Attack Surface|...

EUVD-2026-87856

vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary...

vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

Summary Attacker-controlled code can trigger a host-realm syntax error and read its stack through the vm2 bridge. Host-realm stack formatting bypasses the sandbox-side redaction, so the returned value exposes absolute paths from vm2, Node.js internals, and the embedding application. Default VM an...

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

Summary Sandboxed code is able to disclose host memory used by small allocations by Buffer.from, Buffer.concat. Details vm2 exposes Buffer object to sandboxed code by default. Small Buffer allocations for example, Buffer.allocUnsafe, Buffer.fromarray, Buffer.fromstring, and Buffer.concat use the...

NPM: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

host-realm require is reachable from sandboxed scripts vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

CVE-2026-93606: Protection Mechanism Failure

vm2 npm versions 3.12.0 and earlier contain a sandbox escape in VM and NodeVM. When an embedder exposes a host API that returns a host-realm Promise, the bridge's rejection sanitizer hostPromiseSanitizeReject / makeSanitizedPromiseCallback / normalizeHostPromiseCallbacks in lib/bridge.js only wra...

PT-2026-94325

Name of the Vulnerable Software and Affected Versions vm2 versions 3.10.0 through 3.11.7 Description Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary. While Promises created inside the sandbox are wrapped with a rejection-swallowing handler i...

CVE-2026-92941: Incorrect Permission Assignment for Critical Resource

vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attackers to call tls.setDefaultCACertificates and replace process-wide certificate authorities. Attackers with access to allowed tls and url builtins can use URLSearchParams to create host-realm...

PT-2026-95385

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.12.1 Description A sandbox escape exists in VM and NodeVM when an embedder exposes a host API that returns a host-realm Promise. The bridge's rejection sanitizer, specifically the functions hostPromiseSanitizeReject,...

PT-2026-94318

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7 Description The software exposes the shared Buffer pool of Node.js to sandboxed code. This allows sandboxed code to acquire ArrayBuffers from small allocations to read and write to host-realm buffers. This issue ca...