Executive brief
vm2 is a popular software library used to run untrusted code in a secure, isolated 'sandbox' environment. A critical flaw allows an attacker to break out of this isolation and modify the core settings of the underlying server. This can lead to full control over the host system, potentially resulting in data theft, service disruption, or unauthorized access to the broader corporate network.
Technical details
A sandbox escape vulnerability exists in vm2 versions 3.9.6 through 3.10.5 due to improper isolation in the bridge component. The bridge exposes mutable proxies for host-realm intrinsic prototypes and incorrectly forwards sandbox writes to the underlying host objects using otherReflectSet() and otherReflectDefineProperty(). An attacker can use a prototype-walking primitive to reach and mutate the host's Object.prototype, Array.prototype, or Function.prototype. This prototype pollution allows for arbitrary code execution on the host machine. The issue is fixed in version 3.11.0.
Affected products
- patriksimek vm2 3.9.6-3.10.5
- Red Hat Self-service automation portal 2 2
Timeline
- 2026-05-01: advisory: Original GitHub advisory published by patriksimek
- 2026-05-13: disclosed: CVE-2026-44005 published to NVD
- 2026-05-13: patched: Fix released in version 3.11.0