VM2 versions prior to 3.11.0 contain a sandbox breakout vulnerability via the __lookupGetter__ method. This flaw allows attackers executing code inside the VM2 sandbox to escape it and run arbitrary commands on the host system. The vulnerability arises from the ability to access host context getters through a crafted call sequence involving Buffer.apply and prototype manipulation. Although a prior fix was attempted, it can be bypassed using Object.getOwnPropertyDescriptor to access the constructor property and execute host code. The vulnerability has a critical CVSS score of 9.8 and is fixed in VM2 version 3.11.0.