GHSA-V6MX-MF47-R5WG vm2 has a Sandbox Escape issue

Summary By combining Buffer.call.call.lookupGetter, Buffer, "proto", Buffer.call.call.lookupSetter, Buffer, "proto", and Node.js's ERRINVALIDARGTYPE Error, the host's TypeError constructor can be obtained, which allows the escape from the sandbox. This allows attackers to run arbitrary code. PoC ...

vm2 has a Sandbox Escape issue

Summary By combining Buffer.call.call.lookupGetter, Buffer, "proto", Buffer.call.call.lookupSetter, Buffer, "proto", and Node.js's ERRINVALIDARGTYPE Error, the host's TypeError constructor can be obtained, which allows the escape from the sandbox. This allows attackers to run arbitrary code. PoC ...

PT-2026-45032

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.4 Description A sandbox escape allows arbitrary code execution in the host process when untrusted code is executed with async support on runtimes exposing WebAssembly JSPI WebAssembly JavaScript Promise Integration,...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary code.

The vulnerability of the NPM packet manager’s vm2 library is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-47131

creationtimestamp| type| source ---|---|--- 2026-05-18 12:45:44+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg 2026-07-09 07:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq75jnrniv24...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary commands.

The vulnerability of the NPM package manager’s vm2 library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the BaseHandler.getPrototypeOf() function in the vm2 package manager NPM allows a attacker to bypass the sandbox protection mechanisms and execute arbitrary code.

The vulnerability of the BaseHandler.getPrototypeOf function in the vm2 package manager’s NPM library is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to bypass the sandboxing mechanisms and execute arbitrary code...

The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows attackers to bypass the sandbox protection mechanisms and execute arbitrary code.

The vulnerability of the NPM package manager’s vm2 library is related to improper code generation management. Exploiting this vulnerability allows an attacker to bypass the sandbox’s security mechanisms and execute arbitrary code...

The vulnerability of the NPM packet manager’s vm2 library, related to an error in handling exception states, allows a attacker to trigger a service failure.

The vulnerability of the NPM packet manager’s vm2 library is related to an error in handling exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Bufferalloc() function in the vm2 package manager’s library allows a attacker to cause a service failure.

The vulnerability of the Bufferalloc function in the vm2 package manager’s library is related to the unlimited distribution of resources when processing the timeout parameter. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the NPM packet manager’s library vm2, related to deficiencies in the error reporting mechanism, allows attackers to disclose sensitive information.

The vulnerability of the NPM package manager’s vm2 library is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that should be protected...

The vulnerability of the Module._load() function in the built-in module of the vm2 package manager NPM allows a hacker to execute arbitrary code.

The vulnerability of the Module.load function in the vm2 library’s npm package manager is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the NPM package manager vm2 library allows a hacker to execute arbitrary commands.

The vulnerability of the NPM packet manager’s library vm2 is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the NPM packet manager’s vm2 library allows attackers to bypass the sandbox’s security mechanisms.

The vulnerability of the NPM package manager’s vm2 library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to bypass the sandbox’s security mechanisms...

CVE-2026-24118

A flaw was found in vm2, an open-source sandbox for Node.js. This sandbox breakout vulnerability allows attackers to write malicious code that can escape the vm2 sandbox. Successful exploitation enables the execution of arbitrary commands on the host system, leading to critical system compromise...

CVE-2026-24120

A flaw was found in vm2, an open-source sandbox for Node.js. This vulnerability allows a remote attacker to bypass existing security controls, specifically the fix for CVE-2023-37466. By circumventing the sandbox, an attacker can execute arbitrary commands on the host system, leading to a complet...

@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +288 more potentially affected by CVE-2026-45411 via vm2 (>=3.0.0, <=3.11.2)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

EUVD-2026-30086

vm2 Has a Sandbox Breakout Using Async Generator...

Arbitrary Code Injection

Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection through the yield iterator inside an async generator. An attacker can execute arbitrary commands on the host...

org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-45411 via org.webjars.npm:vm2 (3.9.19)

org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...