CVE-2026-92936— vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack
Quick assessment
Affected
patriksimek vm2
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
vm2 版本 3.11.0 至 3.11.6 存在一个安全漏洞：通过错误堆栈格式化的方式，主机绝对文件系统路径会泄露给沙箱化代码。 攻击者提供的代码可以强制宿主 realm（host-realm）的源码转换器抛出 SyntaxError（例如，通过调用 eval 传入格式错误的源代码），随后读取该错误对象的 属性。由于桥接机制会将对该 属性的读取请求转发至宿主 realm 的格式化器，从而绕过了此前针对 GHSA-v27g-jcqj-v8rw 漏洞在沙箱侧引入的主机路径脱敏（redaction）机制。 返回的堆栈字
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| patriksimek | vm2 | 3.11.0< 3.11.7 |
affected |
3.11.7 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92936
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack
Source: CVE Program / CVE List V5
Vulnerability Description
vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source transformer to throw a SyntaxError (for example by calling eval with malformed source) and then read the error's .stack property; the bridge forwards the .stack read to the host-realm formatter, bypassing the sandbox-side host-path redaction introduced for GHSA-v27g-jcqj-v8rw. The returned stack string discloses absolute paths from vm2, Node.js internals, and the embedding application's own source tree, along with host function names. Default new VM() and new NodeVM() configurations are affected without any special options, and the issue persists when string eval is disabled because the host-side transformer throws before eval is handled. The impact is information disclosure only; no code execution results. Fixed in vm2 3.11.7.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过错误消息导致的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| patriksimek | vm2 | 3.11.0 ~ 3.11.7 | - |
|
II. Public POCs for CVE-2026-92936
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92936
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-92936 (2)
Same Patch Batch · patriksimek · 2026-09-17 · 30 CVEs total
| CVE-2026-92946 | 10.0 CRITICAL | vm2 before 3.11.7 Remote Code Execution via require.external |
| CVE-2026-92947 | 10.0 CRITICAL | vm2 before 3.11.7 Memory Disclosure via Buffer Pool |
| CVE-2026-92941 | 10.0 CRITICAL | vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation |
| CVE-2026-92960 | 10.0 CRITICAL | vm2 before 3.11.6 Process-wide State Exposure via os and dns |
| CVE-2026-92940 | 10.0 CRITICAL | vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent |
| CVE-2026-92955 | 10.0 CRITICAL | vm2 before 3.11.8 Sandbox Escape via NodeVM |
| CVE-2026-92937 | 10.0 CRITICAL | vm2 3.11.6 Remote Code Execution via Promise call/apply |
| CVE-2026-92953 | 10.0 CRITICAL | vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray |
| CVE-2026-92956 | 10.0 CRITICAL | vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming |
| CVE-2026-92957 | 9.9 CRITICAL | vm2 before 3.11.7 Authentication Bypass via node: Prefix |
| CVE-2026-92939 | 9.9 CRITICAL | vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine |
| CVE-2026-92938 | 9.9 CRITICAL | vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite |
| CVE-2026-92951 | 9.9 CRITICAL | vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver |
| CVE-2026-92948 | 9.9 CRITICAL | vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test |
| CVE-2026-92944 | 9.8 CRITICAL | vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector |
| CVE-2026-92934 | 9.0 CRITICAL | vm2 before 3.11.8 Sandbox Escape RCE via AggregateError |
| CVE-2026-92935 | 9.0 CRITICAL | vm2 NodeVM Remote Code Execution via Array-Shaped Require |
| CVE-2026-92954 | 8.6 HIGH | vm2 3.10.0 through 3.11.5 Denial of Service via Host Promise |
| CVE-2026-92950 | 8.6 HIGH | vm2 before 3.11.7 Sandbox Escape via CLI require |
| CVE-2026-92958 | 8.5 HIGH | vm2 before 3.11.7 Denylist Bypass via fs/promises |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: vm2
-
CVE-2026-93606
vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species -
CVE-2026-93604
vm2 3.11.8 Sandbox Escape via crypto.setFips -
CVE-2026-93605
vm2 NodeVM before 3.12.1 Remote Code Execution via child_pro -
CVE-2026-93603
vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Fun -
CVE-2026-92963
vm2 before 3.11.2 Information Disclosure via Internal State
Same vendor: patriksimek
-
CVE-2026-93606
vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species -
CVE-2026-93605
vm2 NodeVM before 3.12.1 Remote Code Execution via child_pro -
CVE-2026-93604
vm2 3.11.8 Sandbox Escape via crypto.setFips -
CVE-2026-93603
vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Fun -
CVE-2026-92963
vm2 before 3.11.2 Information Disclosure via Internal State
Same weakness: CWE-209
-
CVE-2026-1030
Multiple vulnerabilities affect IBM License Key Server Admin -
CVE-2025-1350
Multiple vulnerabilities in IBM Controller -
CVE-2026-55375
canto-saas-api: OAuth credentials exposed in URL query strin -
CVE-2026-55102
hashi-vault-js: Vault token and secret values exposed in thr -
CVE-2026-66306
Skype for Business Information Disclosure Vulnerability
V. Comments for CVE-2026-92936
No comments yet