21 matches found
GHSA-WG86-R78F-74MP Flowise Sandbox Escape to RCE
============================================================================= Security Advisory elttam Topic: Flowise JavaScript Sandbox Escape Module: FlowiseAI/Flowise, FlowiseAI/nodevm Disclosed: 11-Apr-2026 Credits: Luke Jahnke and Alex Brown Affects: FlowiseAI/Flowise 3.1.1, FlowiseAI/nodevm...
The vulnerability of the setup-sandbox.js file in the vm2 package manager of NPM allows a hacker to execute arbitrary code.
The vulnerability of the setup-sandbox.js file in the vm2 package manager’s library in NPM is related to a data protection mechanism breach. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
CVE-2026-47208 vm2: Sandbox Breakout Using Promise Species
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.11.4...
CVE-2026-47137 vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCE
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx CVE-2023-37903 introduced a check in nodevm.js line 263 that blocks the combination nesting: true + require: false. However, the check uses strict equality options.require === false, which is...
GHSA-V6MX-MF47-R5WG vm2 has a Sandbox Escape issue
Summary By combining Buffer.call.call.lookupGetter, Buffer, "proto", Buffer.call.call.lookupSetter, Buffer, "proto", and Node.js's ERRINVALIDARGTYPE Error, the host's TypeError constructor can be obtained, which allows the escape from the sandbox. This allows attackers to run arbitrary code. PoC ...
The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows attackers to bypass the sandbox protection mechanisms and execute arbitrary code.
The vulnerability of the NPM package manager’s vm2 library is related to improper code generation management. Exploiting this vulnerability allows an attacker to bypass the sandbox’s security mechanisms and execute arbitrary code...
The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary commands.
The vulnerability of the NPM package manager’s vm2 library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the NPM packet manager’s library vm2, related to deficiencies in the error reporting mechanism, allows attackers to disclose sensitive information.
The vulnerability of the NPM package manager’s vm2 library is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that should be protected...
The vulnerability of the NPM packet manager’s vm2 library, related to an error in handling exception states, allows a attacker to trigger a service failure.
The vulnerability of the NPM packet manager’s vm2 library is related to an error in handling exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary commands.
The vulnerability of the NPM packet manager’s library vm2 is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the NPM packet manager’s vm2 library allows attackers to bypass the sandbox’s security mechanisms.
The vulnerability of the NPM package manager’s vm2 library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to bypass the sandbox’s security mechanisms...
CVE-2026-44006 vm2: Sandbox Escape
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability is fixed in 3.11.0...
The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
GHSA-47X8-96VW-5WG6 vm2 Access to Host Object Enables Sandbox Escape
Summary It is possible to obtain the host Object, https://github.com/patriksimek/vm2/commit/ebcfe94ad2f864f0bc35e78cff1d921107cfd160 added some protections, but the implementation is incomplete. Details There are various ways to use the host Object, to escape the sandbox, one example would be usi...
GHSA-55HX-C926-FR95 VM2 Has a Sandbox Escape Issue via SuppressedError
In vm2 v3.10.4 on Node.js v24.13.0, SuppressedError allows attackers to escape the sandbox and run arbitrary code. PoC js const VM = require"vm2"; const vm = new VM; vm.run const ds = new DisposableStack; ds.defer = throw null; ; ds.defer = const e = Error; e.name = Symbol; e.stack; ; try...
The vulnerability of the NPM packet manager’s vm2 library arises from the lack of measures taken to eliminate special elements used in the operating system command. This vulnerability allows attackers to execute arbitrary code.
The vulnerability of the NPM packet manager’s vm2 library exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows a attacker to escape from a isolated programming environment and execute arbitrary code.
The vulnerability of the NPM package manager’s vm2 library is related to improper code generation during the processing of Promise objects with the @@species parameter. Exploiting this vulnerability allows a remote attacker to escape from a isolated programming environment and execute arbitrary...
The vulnerability of the handleException() function in the vm2 package manager’s library exists because measures to neutralize special elements are not taken. This allows a malicious user to exit from a isolated programming environment and execute arbitrary code.
The vulnerability of the handleException function in the vm2 package manager’s library exists because measures to neutralize special elements are not taken. Exploiting this vulnerability can allow a remote attacker to exit from a isolated programming environment and execute arbitrary code...
GHSA-CH3R-J5X3-6Q2M vm2 Sandbox Escape vulnerability
There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException which can be used to escape the sandbox and run arbitrary code in host context. Impact A threat actor can bypass the sandbox...