CVE-2026-24118

VM2 (Node.js VM/Sandbox) prior to version 3.11.0 contains a sandbox breakout vulnerability that allows attackers to escape the VM2 sandbox and run arbitrary commands on the host. Impact is described as high for confidentiality, integrity, and availability. The issue has been fixed in version 3.11...