CVE-2026-92950— vm2 before 3.11.7 Sandbox Escape via CLI require
Quick assessment
Affected
patriksimek vm2
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
vm2 3.11.7 之前版本中存在一个沙箱逃逸漏洞，位于其命令行工具（CLI）中，允许攻击者在宿主 Node.js 进程中执行任意代码。攻击者可以向 vm2 CLI 提供一个恶意脚本文件，该脚本通过 在宿主环境中重新执行自身，从而绕过沙箱隔离机制，并访问 和 等宿主模块。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92950
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vm2 before 3.11.7 Sandbox Escape via CLI require
Source: CVE Program / CVE List V5
Vulnerability Description
vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses require(__filename) to re-execute itself in the host realm, bypassing sandbox isolation and accessing host modules like fs and child_process.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不安全的缺省变量初始化
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| patriksimek | vm2 | 0 ~ 3.11.7 | - |
|
II. Public POCs for CVE-2026-92950
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92950
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-92950 (2)
-
-
🔗 vm2 before 3.11.7 Sandbox Escape via CLI require | Advisories | VulnCheck third-party-advisory
Same Patch Batch · patriksimek · 2026-09-17 · 30 CVEs total
| CVE-2026-92946 | 10.0 CRITICAL | vm2 before 3.11.7 Remote Code Execution via require.external |
| CVE-2026-92947 | 10.0 CRITICAL | vm2 before 3.11.7 Memory Disclosure via Buffer Pool |
| CVE-2026-92941 | 10.0 CRITICAL | vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation |
| CVE-2026-92960 | 10.0 CRITICAL | vm2 before 3.11.6 Process-wide State Exposure via os and dns |
| CVE-2026-92940 | 10.0 CRITICAL | vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent |
| CVE-2026-92955 | 10.0 CRITICAL | vm2 before 3.11.8 Sandbox Escape via NodeVM |
| CVE-2026-92937 | 10.0 CRITICAL | vm2 3.11.6 Remote Code Execution via Promise call/apply |
| CVE-2026-92953 | 10.0 CRITICAL | vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray |
| CVE-2026-92956 | 10.0 CRITICAL | vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming |
| CVE-2026-92957 | 9.9 CRITICAL | vm2 before 3.11.7 Authentication Bypass via node: Prefix |
| CVE-2026-92939 | 9.9 CRITICAL | vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine |
| CVE-2026-92938 | 9.9 CRITICAL | vm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite |
| CVE-2026-92951 | 9.9 CRITICAL | vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver |
| CVE-2026-92948 | 9.9 CRITICAL | vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test |
| CVE-2026-92944 | 9.8 CRITICAL | vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector |
| CVE-2026-92934 | 9.0 CRITICAL | vm2 before 3.11.8 Sandbox Escape RCE via AggregateError |
| CVE-2026-92935 | 9.0 CRITICAL | vm2 NodeVM Remote Code Execution via Array-Shaped Require |
| CVE-2026-92954 | 8.6 HIGH | vm2 3.10.0 through 3.11.5 Denial of Service via Host Promise |
| CVE-2026-92958 | 8.5 HIGH | vm2 before 3.11.7 Denylist Bypass via fs/promises |
| CVE-2026-92942 | 7.5 HIGH | vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: vm2
-
CVE-2026-92963
vm2 before 3.11.2 Information Disclosure via Internal State -
CVE-2026-92962
vm2 before 3.11.4 Defense Invariant Violation via setup-sand -
CVE-2026-92961
vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit -
CVE-2026-92960
vm2 before 3.11.6 Process-wide State Exposure via os and dns -
CVE-2026-92959
vm2 before 3.11.8 allowAsync Bypass via Promise Thenable
Same vendor: patriksimek
-
CVE-2026-92963
vm2 before 3.11.2 Information Disclosure via Internal State -
CVE-2026-92962
vm2 before 3.11.4 Defense Invariant Violation via setup-sand -
CVE-2026-92961
vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllocLimit -
CVE-2026-92960
vm2 before 3.11.6 Process-wide State Exposure via os and dns -
CVE-2026-92959
vm2 before 3.11.8 allowAsync Bypass via Promise Thenable
Same weakness: CWE-453
-
CVE-2026-41330
OpenClaw < 2026.3.31 - Environment Variable Override via Hos -
CVE-2025-61926
Allstar Reviewbot has Authentication Bypass via Hard-coded W -
CVE-2025-47945
Donetick Has Weak Default JWT Secret -
CVE-2024-49120
Windows Remote Desktop Services Remote Code Execution Vulner -
CVE-2024-39916
NFS server misconfiguration allows file access outside the e
V. Comments for CVE-2026-92950
No comments yet