The vm2 Node.js sandbox prior to version 3.11.2 contains a vulnerability in the neutralizeArraySpeciesBatch method that allows cross-realm array prototype getter invocation. This flaw exposes host objects, including the host Function object, inside the sandbox environment. An unauthenticated remote attacker able to submit sandboxed code can exploit this to escape the sandbox and execute arbitrary commands on the host. The vulnerability is tracked as CVE-2026-44008 with a CVSS 3.1 base score of 9.8 (critical). The issue is fixed in vm2 version 3.11.2. Red Hat advisories confirm the vulnerability and the fix in 3.11.2, with no known exploits in the wild.

Successful exploitation allows an attacker to escape the vm2 sandbox and execute arbitrary code on the host system with the privileges of the sandboxed environment. This results in full confidentiality, integrity, and availability impact on the host system. The vulnerability requires no privileges or user interaction and can be exploited remotely by submitting malicious sandboxed code.

A fix is available in vm2 version 3.11.2. Users should upgrade to vm2 3.11.2 or later to remediate this vulnerability. No alternative mitigations are specified by the vendor advisory. Since this is a code execution vulnerability due to sandbox escape, upgrading is the recommended and effective remediation.