CVE-2026-92935

vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor computes `hasRealRequireConfig` with `typeof requireOpts === 'object' && requireOpts !== null`, so an array-shaped `require` value (for example `require: []`) satisfies the guard that is meant to reject nesting without an explicit require configuration. `makeResolverFromLegacyOptions()` then destructures the array into undefined option fields and returns a resolver containing only `NESTING_OVERRIDE.vm2`. As a result, an attacker who can supply JavaScript executed by a NodeVM configured with truthy `nesting` and an array-shaped `require` (e.g. `new NodeVM({nesting: true, require: []})`) can require the host `vm2` module, create an inner NodeVM with an attacker-chosen builtin allowlist (such as `child_process`), and execute arbitrary commands with the privileges of the host Node.js process, escaping the sandbox. Outer builtin restrictions do not constrain the attacker-created inner NodeVM. This issue is fixed in vm2 3.11.7.

• CWE-913

• https://github.com/patriksimek/vm2/commit/54b54b74a382577f0bcd0538c5bf99acdcd7f53b
• https://github.com/patriksimek/vm2/security/advisories/GHSA-8hr7-r645-pc6w
• https://www.vulncheck.com/advisories/vm2-nodevm-remote-code-execution-via-array-shaped-require

Published

Sep 17, 2026

Last Modified

Sep 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92925A flaw was found in Redis community. The cluster bus packet …7.1
• CVE-2026-92926A vulnerability has been found in code-projects Matrimonial …7.3
• CVE-2026-92927A vulnerability was found in SourceCodester Drug Recommendat…5.3
• CVE-2026-92932In the MISP sachertortephp library, the Xml::build() static …5.1
• CVE-2026-92933vm2 is a sandbox for running untrusted Node.js code. In vers…5.8
• CVE-2026-92934vm2 before 3.11.8 contains an incomplete fix for Error.cause…9
• CVE-2026-92936vm2 versions 3.11.0 through 3.11.6 leak absolute host filesy…5.8
• CVE-2026-92937vm2 3.11.6 is vulnerable to a sandbox escape leading to remo…10
• CVE-2026-92938vm2 versions 3.11.3 through 3.11.6 expose Node.js's host nod…9.9
• CVE-2026-92939vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto mo…9.9
• CVE-2026-9294A vulnerability was identified in Edimax BR-6428NS 1.10. The…8.8
• CVE-2026-92940vm2 versions 3.11.3 through 3.11.6 expose the host process's…10