Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2026-92938— vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite

Quick assessment

Affected

patriksimek vm2

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

vm2 3.11.3 至 3.11.6 版本中，当 NodeVM 中运行的代码被允许访问内置模块时（无论是显式允许，还是通过允许），会暴露 Node.js 主机的模块。该模块被包装，虽然禁止了属性赋值，但主机权限的可调用对象仍然可以访问。此外，解析器将任何以开头的请求都视为主模块请求，而运行时仅剥离一个前缀，因此沙箱内对的请求会解析到已配置的条目。因此，沙箱化的代码可以创建一个启用了扩展加载的内存数据库（in-memory DatabaseSync），并在来自不可信插件包的预置原生库（路径由推导得

CVSS 9.9 · Critical Updated Sep 17, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite

Source: CVE Program / CVE List V5

Vulnerability Description

vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin is permitted, either explicitly or through builtin: ['*']. The module is wrapped with vm.readonly(), which prevents property assignment but leaves host-authority callables reachable; in addition, the resolver treats any request starting with 'node:' as a core-module request and the runtime strips only one 'node:' prefix, so a sandbox request for 'node:node:sqlite' resolves to the configured node:sqlite entry. Sandboxed code can therefore create an in-memory DatabaseSync with extension loading enabled and call DatabaseSync.loadExtension() on a native library bundled in the untrusted plugin package (path derived from __dirname). SQLite loads the library into the Node.js host process and invokes its native entry point, giving the sandboxed plugin arbitrary native code execution outside the sandbox with the host process's privileges. The issue is fixed in vm2 3.11.7.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

保护机制失效

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
patriksimek	vm2	3.11.3 ~ 3.11.7	-

II. Public POCs for CVE-2026-92938

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-92938

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-92938 (1)

🔗 vm2 3.11.6 allows a sandboxed plugin to execute native code through `node:sqlite` · Advisory · patriksimek/vm2 · GitHub Read full article vendor-advisory

Vendor Pages for CVE-2026-92938 (1)

🔗 vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite | Advisories | VulnCheck Read full article third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-92938

Same Patch Batch · patriksimek · 2026-09-17 · 30 CVEs total

CVE-2026-92946	10.0 CRITICAL	vm2 before 3.11.7 Remote Code Execution via require.external
CVE-2026-92947	10.0 CRITICAL	vm2 before 3.11.7 Memory Disclosure via Buffer Pool
CVE-2026-92941	10.0 CRITICAL	vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation
CVE-2026-92960	10.0 CRITICAL	vm2 before 3.11.6 Process-wide State Exposure via os and dns
CVE-2026-92940	10.0 CRITICAL	vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent
CVE-2026-92955	10.0 CRITICAL	vm2 before 3.11.8 Sandbox Escape via NodeVM
CVE-2026-92953	10.0 CRITICAL	vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray
CVE-2026-92937	10.0 CRITICAL	vm2 3.11.6 Remote Code Execution via Promise call/apply
CVE-2026-92956	10.0 CRITICAL	vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming
CVE-2026-92957	9.9 CRITICAL	vm2 before 3.11.7 Authentication Bypass via node: Prefix
CVE-2026-92939	9.9 CRITICAL	vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine
CVE-2026-92951	9.9 CRITICAL	vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver
CVE-2026-92948	9.9 CRITICAL	vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test
CVE-2026-92944	9.8 CRITICAL	vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector
CVE-2026-92935	9.0 CRITICAL	vm2 NodeVM Remote Code Execution via Array-Shaped Require
CVE-2026-92934	9.0 CRITICAL	vm2 before 3.11.8 Sandbox Escape RCE via AggregateError
CVE-2026-92954	8.6 HIGH	vm2 3.10.0 through 3.11.5 Denial of Service via Host Promise
CVE-2026-92950	8.6 HIGH	vm2 before 3.11.7 Sandbox Escape via CLI require
CVE-2026-92958	8.5 HIGH	vm2 before 3.11.7 Denylist Bypass via fs/promises
CVE-2026-92942	7.5 HIGH	vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry

Showing top 20 of 30 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: vm2

Same vendor: patriksimek

Same weakness: CWE-693

V. Comments for CVE-2026-92938

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-92938— vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2026-92938

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-92938

III. Intelligence Information for CVE-2026-92938

Vendor Advisories for CVE-2026-92938 (1)

Vendor Pages for CVE-2026-92938 (1)

Same Patch Batch · patriksimek · 2026-09-17 · 30 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-92938

Leave a comment