Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure in the Promise.prototype.finally process. An attacker can execute arbitrary code by crafting an async function that...

Modification of Assumed-Immutable Data (MAID)

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID in the Object.getOwnPropertyDescriptor or lookupSetter process. An attacker can modify properties that we...

Use of Incorrectly-Resolved Name or Reference

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Use of Incorrectly-Resolved Name or Reference via the allowlist process. An attacker can execute unauthorized code in the host context by requiring a...

Incorrect Resource Transfer Between Spheres

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Incorrect Resource Transfer Between Spheres incomplete filtering of Node.js registered internal symbols across the sandbox boundary. An attacker can...

Improper Control of Dynamically-Managed Code Resources

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources through the mutation of TypedArray and ArrayBuffer prototypes. An attacker can alter the...

Information Exposure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Information Exposure via the Buffer pool. An attacker can access and manipulate host memory by leveraging sandboxed code to acquire ArrayBuffers from...

Improper Privilege Management

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Improper Privilege Management in the require process. An attacker can gain unauthorized access to restricted filesystem operations by bypassing the...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure via the WebAssembly.compileStreaming and WebAssembly.instantiateStreaming functions. An attacker can gain access to the...

Information Exposure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Information Exposure via the VM2INTERNALSTATEDONOTUSEORPROGRAMWILLFAIL global variable. An attacker can retrieve sensitive sandbox internals by...

Uncaught Exception

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Uncaught Exception in the handling of Promises returned from the host realm into the sandbox. An attacker can cause the host process to terminate...

Improper Privilege Management

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Improper Privilege Management in the require process. An attacker can execute arbitrary commands on the host system by bypassing the intended module...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure through improper enforcement of the allowAsync option in the VM and NodeVM. An attacker can execute code asynchronously...

CVE-2026-92959

A flaw was found in vm2, a JavaScript sandbox. This vulnerability allows a sandboxed script to bypass security restrictions designed to prevent asynchronous code execution. An attacker can exploit this by using specific Promise methods to assimilate malicious 'thenables,' enabling code to run...

CVE-2026-92961

A flaw was found in vm2. This vulnerability allows an attacker to bypass the bufferAllocLimit enforcement on ArrayBuffer, SharedArrayBuffer, and TypedArray constructors. By doing so, the attacker can allocate arbitrary host memory, leading to memory exhaustion and a Denial of Service DoS conditio...

Insecure Defaults

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Insecure Defaults via the require process in the CLI tool. An attacker can execute arbitrary code in the host environment by supplying a malicious...

Protection Mechanism Failure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Protection Mechanism Failure through the handleException process. An attacker can execute arbitrary code and disclose process information by exploiti...

Process Control

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Process Control in the crypto.setEngine function. An attacker can execute arbitrary native code in the host process by supplying a path to a maliciou...

Improper Control of Dynamically-Managed Code Resources

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources via the NodeVM process. An attacker can execute arbitrary code in the host environment by...

Directory Traversal

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Directory Traversal via the isPathAllowedForModule function. An attacker can access non-allowlisted modules by exploiting prefix matching in module...

Duplicate Advisory: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jxxv-8r27-vm4p. This link is maintained to preserve external references. Original Description vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary...