VM2 versions prior to 3.11.0 contain a sandbox breakout vulnerability via the inspect function. This flaw allows attackers to escape the VM2 sandbox and execute arbitrary commands on the host system. The vulnerability arises from the way the inspect method unwraps proxies, enabling access to internal proxy handlers and ultimately the host environment. A proof-of-concept demonstrates how an attacker can leverage this to run arbitrary code. The vulnerability is rated critical with a CVSS score of 9.8 and has been fixed in version 3.11.0.