Vulnerability · Published Jun 12, 2026 · Assigned by GitHub_M

CVE-2026-47131vm2: Sandbox Escape

Critical 10.0

In plain English

A critical-severity security flaw in vm2 from patriksimek. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)0.8%top 44.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, "__proto__"), Buffer.call.call({}.__lookupSetter__, Buffer, "__proto__"), and Node.js's ERR_INVALID_ARG_TYPE Error, the host's TypeError constructor can be obtained, which allows the escape from the sandbox. This allows attackers to run arbitrary code. This issue has been patched in version 3.11.4.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	vm2	3.11.4	GHSA-v6mx-mf47-r5wg

Affected products (as reported)

Vendor	Product	Versions
patriksimek	vm2	< 3.11.4

Weakness: CWE-913 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg x_refsource_CONFIRM
https://github.com/patriksimek/vm2/commit/27c525f4615e2b983f122e2bed327d810126f5c8 x_refsource_MISC
https://github.com/patriksimek/vm2/releases/tag/v3.11.4 x_refsource_MISC