by Kastro
Paper/Archive/CVE-2026-47140

CVE-2026-47140

patriksimek vm2 — vm2: NodeVM builtin denylist bypass via process and inspector/promises allows host code execution

EPSS 1.0%public exploitCVSS 10.0
critical.is priorityof 100
52
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 62.2.622 × 2012.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangerous Node.js builtins such as module, worker_threads, cluster, vm, repl, and inspector. However, the denylist misses process and inspector/promises. Both can be used from sandboxed code to reach host-side execution primitives. This allows sandboxed code to bypass the intended builtin restrictions and execute code in the host process. This issue has been patched in version 3.11.4.

Affected

ProductAffectedFixed inSource
vm2< 3.11.4–CNA

Scores by source

GitHub_M (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4refgithub.com/patriksimek/vm2/commit/a1ed47a98d1cc36cb48c0d566d55889688e0b59brefgithub.com/patriksimek/vm2/releases/tag/v3.11.4