CVE-2026-47137— vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCE
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| patriksimek | vm2 | < 3.11.4 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-47137
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCE
Source: CVE Program / CVE List V5
Vulnerability Description
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the fix for GHSA-8hg8-63c5-gwmx (CVE-2023-37903) introduced a check in nodevm.js line 263 that blocks the combination nesting: true + require: false. However, the check uses strict equality (options.require === false), which is trivially bypassed by omitting the require option entirely. When require is not specified, options.require is undefined, not false. The strict equality check fails, so the security guard is skipped. Immediately after (line 280), the destructuring default require: requireOpts = false assigns requireOpts = false, producing the exact configuration the patch was designed to prevent. This issue has been patched in version 3.11.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
动态管理代码资源的控制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Patrik Simek vm2 处理逻辑错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
patriksimek vm2是patriksimek的沙箱。 Patrik Simek vm2 3.11.4之前版本存在处理逻辑错误漏洞，该漏洞源于处理逻辑错误，导致修复检查通过严格相等比较(options.require === false)但可被绕过。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| patriksimek | vm2 | < 3.11.4 | - |
II. Public POCs for CVE-2026-47137
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCVerified env Premium
Qwen3.6-35B-A3B · 7845 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-47137
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-47137 (2)
Vendor Advisories for CVE-2026-47137 (2)
Vendor Pages for CVE-2026-47137 (1)
Same Patch Batch · patriksimek · 2026-06-12 · 9 CVEs total
| CVE-2026-47140 | 10.0 CRITICAL | vm2: NodeVM builtin denylist bypass via process and inspector/promises allows host code ex |
| CVE-2026-47208 | 10.0 CRITICAL | vm2: Sandbox Breakout Using Promise Species |
| CVE-2026-47131 | 10.0 CRITICAL | vm2: Sandbox Escape |
| CVE-2026-47210 | 9.8 CRITICAL | vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass |
| CVE-2026-47135 | 8.7 HIGH | vm2: Sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap |
| CVE-2026-47139 | 8.6 HIGH | vm2: NodeVM network builtin exclusions bypass via internal _http_client and _http_server |
| CVE-2026-47209 | 8.6 HIGH | vm2: Bridge Proxy set trap ignores receiver parameter, enabling host object property injec |
| CVE-2026-47141 | vm2: NodeVM observability builtins leak host process and HTTP request data |
IV. Related Vulnerabilities
Same product: vm2
- CVE-2026-47141
vm2: NodeVM observability builtins leak host process and HTT - CVE-2026-47210
vm2 sandbox escape via JSPI-backed Promise `.finally()` spec - CVE-2026-47208
vm2: Sandbox Breakout Using Promise Species - CVE-2026-47140
vm2: NodeVM builtin denylist bypass via process and inspecto - CVE-2026-47139
vm2: NodeVM network builtin exclusions bypass via internal _
Same vendor: patriksimek
- CVE-2026-47141
vm2: NodeVM observability builtins leak host process and HTT - CVE-2026-47210
vm2 sandbox escape via JSPI-backed Promise `.finally()` spec - CVE-2026-47208
vm2: Sandbox Breakout Using Promise Species - CVE-2026-47140
vm2: NodeVM builtin denylist bypass via process and inspecto - CVE-2026-47139
vm2: NodeVM network builtin exclusions bypass via internal _
V. Comments for CVE-2026-47137
No comments yet