Vulnerability details

CVE-2026-44005

patriksimek vm2

vm2: Sandbox escape

CVSS 3.1

10.0Critical

Official description

vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writes into the underlying host objects with otherReflectSet() and otherReflectDefineProperty(), which lets attacker-controlled JavaScript running in a default VM or inherited NodeVM mutate shared host Object.prototype, Array.prototype, and Function.prototype from inside the sandbox This vulnerability is fixed in 3.11.0.

CVSS scores

Score	Version	Source	Vector
10.0Critical	3.1	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H`
9.8Critical	3.1	CVEProject cvelistV5 (CNA) (redhat-SADP)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
patriksimek	vm2	>= 3.9.6, < 3.11.0	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq x_refsource_CONFIRM
https://access.redhat.com/security/cve/CVE-2026-44005 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2477205 issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44005.json x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:50850 vendor-advisoryx_refsource_REDHAT

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-05-13
Last updated: 2026-09-07
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

0.83%

Probability of exploitation in 30 days

57.7%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CWE-94
Improper Control of Generation of Code ('Code Injection')
CWE-653
Improper Isolation or Compartmentalization