10.0
Critique
CVE-2026-44005 vm2 is an open source vm/sandbox for Node.js
Description
vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writes into the underlying host objects with otherReflectSet() and otherReflectDefineProperty(), which lets attacker-controlled JavaScript running in a default VM or inherited NodeVM mutate shared host Object.prototype, Array.prototype, and Function.prototype from inside the sandbox This vulnerability is fixed in 3.11.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| vm2 3.9 | 3.9.6 → < 3.11.0 | 3.11.0 |
| Self-service automation portal 2 | Versions non publiées | |
| Red Hat Developer Hub | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.1 1785854226 | premières → < 1785854226 | 1785854226 |
| Self-service automation portal 2.1 1785854226 | premières → < 1785854226 | 1785854226 |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de vm2
Les 77 CVE de vm2 →
CVE-2026-100723
vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength…
6.9
Moyenne
CVE-2026-100722
vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap
8.9
Élevée
CVE-2026-100721
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver
9.5
Critique
CVE-2026-93606
vm2 (npm) versions 3.12.0 and earlier contain a sandbox escape in `VM` and `NodeVM`
10.0
Critique