The patriksimek vm2 Node.js sandbox prior to version 3.11.0 contains an incorrect authorization vulnerability (CWE-863) where the builtin allowlist can be bypassed if the 'builtin' module is allowed, including via wildcard '*'. This is because the 'builtin' module exposes Node.js's internal Module._load() function, which can load any module by name in the host context. As a result, sandboxed code can load restricted built-in modules such as child_process, enabling remote code execution outside the sandbox. This vulnerability is addressed in vm2 version 3.11.0.

Successful exploitation allows sandboxed code to bypass vm2's builtin module restrictions and load any Node.js module directly in the host context, including sensitive modules like child_process. This can lead to remote code execution with the privileges of the host process, compromising confidentiality, integrity, and availability of the affected system. The CVSS score of 9.9 reflects the critical nature of this vulnerability.

Upgrade to patriksimek vm2 version 3.11.0 or later, where this vulnerability is fixed. Since no official patch links or vendor advisories are provided, confirm upgrade availability from the official vm2 repository or vendor channels. There is no indication that temporary mitigations or workarounds exist. Patch status is not explicitly confirmed beyond the version fix note; therefore, verify with the vendor for current remediation guidance.