CVE-2023-29199— vm2 Sandbox escape vulnerability
Possible ATT&CK Techniques 2AI
T1218 · System Binary Proxy Execution T1059 · Command and Scripting InterpreterGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-29199
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vm2 Sandbox escape vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass `handleException()` and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context. A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version `3.9.16` of `vm2`.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
动态管理代码资源的控制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
vm2 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
vm2是捷克Patrik Simek个人开发者的一个 Node.js 的高级虚拟机/沙盒。以使用列入白名单的 Node 内置模块运行不受信任的代码。 vm2 3.9.15版本及之前版本存在安全漏洞。攻击者利用该漏洞绕过handleException()并泄漏未清理的主机异常，在其中主机环境中执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| patriksimek | vm2 | < 3.9.16 | - |
II. Public POCs for CVE-2023-29199
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | test CVE-2023-29199 | https://github.com/u-crew/vm2-test | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-29199
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-29199 (1)
Vendor Advisories for CVE-2023-29199 (1)
- https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985x_refsource_CONFIRM
Other References for CVE-2023-29199 (3)
- https://github.com/patriksimek/vm2/issues/516x_refsource_MISC
- https://github.com/patriksimek/vm2/releases/tag/3.9.16x_refsource_MISC
IV. Related Vulnerabilities
Same product: vm2
- CVE-2026-47141
vm2: NodeVM observability builtins leak host process and HTT - CVE-2026-47210
vm2 sandbox escape via JSPI-backed Promise `.finally()` spec - CVE-2026-47208
vm2: Sandbox Breakout Using Promise Species - CVE-2026-47140
vm2: NodeVM builtin denylist bypass via process and inspecto - CVE-2026-47139
vm2: NodeVM network builtin exclusions bypass via internal _
Same vendor: patriksimek
- CVE-2026-47141
vm2: NodeVM observability builtins leak host process and HTT - CVE-2026-47210
vm2 sandbox escape via JSPI-backed Promise `.finally()` spec - CVE-2026-47208
vm2: Sandbox Breakout Using Promise Species - CVE-2026-47140
vm2: NodeVM builtin denylist bypass via process and inspecto - CVE-2026-47139
vm2: NodeVM network builtin exclusions bypass via internal _
Same weakness: CWE-913
- CVE-2026-73226
Electerm WebSocket `upgrade-func` and `fs` handlers allow ar - CVE-2026-47210
vm2 sandbox escape via JSPI-backed Promise `.finally()` spec - CVE-2026-47208
vm2: Sandbox Breakout Using Promise Species - CVE-2026-47137
vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without - CVE-2026-47131
vm2: Sandbox Escape
V. Comments for CVE-2023-29199
No comments yet