CVE-2026-92948

vm2 versions >= 3.9.6 and <= 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a sandbox escape on Node.js 24 and newer when the embedder explicitly allows the node:test builtin (e.g. require: { builtin: ['node:test'] }). On Node.js 24+, module.builtinModules exposes the scheme-only key node:test, which is not covered by vm2's family-based DANGEROUS_BUILTINS protection, so it is stored in the generic host-passthrough loader. Because requireImpl() in lib/setup-node-sandbox.js strips a single 'node:' prefix before the builtin lookup, sandbox code calling require('node:node:test') resolves to the stored node:test key and receives a readonly proxy to the host module. Calls to node:test.run() are forwarded to the host implementation, which spawns a separate Node process for process-isolated test execution and passes through attacker-controlled execArgv values; supplying --eval=<JavaScript> therefore executes arbitrary JavaScript in an unrestricted host Node process outside the NodeVM sandbox. Fixed in vm2 3.11.7.

• CWE-693

• https://github.com/patriksimek/vm2/security/advisories/GHSA-qhwx-74w5-xhxq
• https://www.vulncheck.com/advisories/vm2-3.9.6-through-3.11.5-sandbox-escape-via-node-test
• https://github.com/patriksimek/vm2/security/advisories/GHSA-qhwx-74w5-xhxq

Published

Sep 17, 2026

Last Modified

Sep 18, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92942vm2 before 3.11.7 (affected versions <= 3.11.6) does not enf…7.5
• CVE-2026-92943Improper validation of certificate with host mismatch in the…8.1
• CVE-2026-92944vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape …9.8
• CVE-2026-92945vm2 before 3.11.7 contains a module allowlist bypass vulnera…4.2
• CVE-2026-92946vm2 before 3.11.7 contains a remote code execution vulnerabi…10
• CVE-2026-92947vm2 before 3.11.7 exposes Node's shared Buffer pool to sandb…10
• CVE-2026-92949vm2 versions from 3.9.6 before 3.11.7 fail to properly restr…4
• CVE-2026-9295A security flaw has been discovered in Edimax BR-6428NS 1.10…8.8
• CVE-2026-92950vm2 before 3.11.7 contains a sandbox escape vulnerability in…8.6
• CVE-2026-92951vm2 before 3.11.7 contains an incorrect authorization vulner…9.9
• CVE-2026-92952vm2 versions 3.11.4 through 3.11.6 incompletely filter Node.…6.8
• CVE-2026-92953vm2 versions from 3.11.0 before 3.11.8 fail to protect host …10