CVE-2026-92937: Improper Control of Generation of Code ('Code Injection') in patriksimek vm2
vm2 version 3.11.6 contains a critical sandbox escape vulnerability that allows remote code execution in the host Node.js process. The vulnerability arises from incomplete sanitization of rejected host Promise values when rejection handlers are registered through Function.prototype.call or .apply indirection. This flaw enables untrusted sandbox code to gain a proxy to host objects and execute arbitrary commands with host privileges. The issue is fixed in vm2 version 3.11.7.
AI Analysis
Technical Summary
The vm2 sandbox in version 3.11.6 improperly controls code generation due to incomplete sanitization of rejected host Promise values. Specifically, the bridge gate at lib/bridge.js:1624 only identity-checks the direct call target, missing cases where rejection handlers are registered via Function.prototype.call or .apply. This allows sandboxed code to receive raw host errors with intact properties referencing host objects, such as process, enabling arbitrary command execution with host privileges. The vulnerability is resolved in vm2 3.11.7.
Potential Impact
Exploitation of this vulnerability allows untrusted code running inside the vm2 sandbox to escape the sandbox and execute arbitrary commands on the host system with the privileges of the Node.js process. This can lead to full system compromise, data theft, or disruption of services.
Mitigation Recommendations
Upgrade vm2 to version 3.11.7 or later, where this vulnerability is fixed. The fix addresses the incomplete sanitization of rejected host Promise values and prevents sandbox escape via the described attack vectors.
CVE-2026-92937: Improper Control of Generation of Code ('Code Injection') in patriksimek vm2
Description
vm2 version 3.11.6 contains a critical sandbox escape vulnerability that allows remote code execution in the host Node.js process. The vulnerability arises from incomplete sanitization of rejected host Promise values when rejection handlers are registered through Function.prototype.call or .apply indirection. This flaw enables untrusted sandbox code to gain a proxy to host objects and execute arbitrary commands with host privileges. The issue is fixed in vm2 version 3.11.7.
CVSS v4.0
Score 10.0critical
Affected software
patriksimek
vm2
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vm2 sandbox in version 3.11.6 improperly controls code generation due to incomplete sanitization of rejected host Promise values. Specifically, the bridge gate at lib/bridge.js:1624 only identity-checks the direct call target, missing cases where rejection handlers are registered via Function.prototype.call or .apply. This allows sandboxed code to receive raw host errors with intact properties referencing host objects, such as process, enabling arbitrary command execution with host privileges. The vulnerability is resolved in vm2 3.11.7.
Potential Impact
Exploitation of this vulnerability allows untrusted code running inside the vm2 sandbox to escape the sandbox and execute arbitrary commands on the host system with the privileges of the Node.js process. This can lead to full system compromise, data theft, or disruption of services.
Mitigation Recommendations
Upgrade vm2 to version 3.11.7 or later, where this vulnerability is fixed. The fix addresses the incomplete sanitization of rejected host Promise values and prevents sandbox escape via the described attack vectors.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-17T12:42:34.828Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aac65c355bf5e2cf5fdf67d
Added to database: 09/17/2026, 22:12:19 UTC
Last enriched: 09/17/2026, 22:16:19 UTC
Last updated: 09/17/2026, 23:13:34 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.