Vulnerability · Published May 13, 2026 · Assigned by GitHub_M

CVE-2026-43997vm2: Sandbox Escape

Critical 10.0

In plain English

A critical-severity code injection in vm2 from patriksimek. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)1.0%top 37.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, it is possible to obtain the host Object. There are various ways to use the host Object, to escape the sandbox, one example would be using HostObject.getOwnPropertySymbols to obtain Symbol(nodejs.util.inspect.custom). This vulnerability is fixed in 3.11.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	vm2	3.11.0	GHSA-47x8-96vw-5wg6

Affected products (as reported)

Vendor	Product	Versions
patriksimek	vm2	< 3.11.0

Weakness: CWE-94, CWE-653 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

https://github.com/patriksimek/vm2/security/advisories/GHSA-47x8-96vw-5wg6 x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-43997 vdb-entry, x_refsource_REDHAT
RHBZ#2477203 issue-tracking, x_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43997.json x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:50850 vendor-advisory, x_refsource_REDHAT