CVE-2026-47686Critical· 9.9▾ Midnight

vm2 is an open source vm/sandbox for Node.js

▾ Midnight zone — Critical, or high with PoC / in-the-wild

Depth score55/ 100 · Moderate

impact 54.5 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Aug 17, 2026

Updated

Sep 9, 2026

CVSS

9.9

Vendor

vm2

Product

vm2

CWE

CWE-693

Depth score

55 · Moderate

EPSS

0.38% · p32

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS history

Exploit-prediction probability, daily snapshots since Aug 18.

0.3% → 0.4%▲ 0.06%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 23 days

Aug 17, 2026Published
Disclosed via NVD
Aug 18, 2026EPSS first tracked
0.3%
Aug 24, 2026EPSS peak
0.3% → 0.4%
Sep 9, 2026Record revised
Last analysed / modified upstream

vm2 CWE-693 #nvd #ghsa #npm

Affected

vm2 <= 3.11.5

Patched in

vm2 3.11.6

Full technical detail▾

Overview

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.cause, allowing sandbox code to obtain a powerful host object such as process from an embedder-exposed host function that throws an error with that object as its cause and then execute arbitrary host commands. This issue is fixed in version 3.11.6.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

Package advisory (CVE-2026-47686)

Affected packages:

vm2 <= 3.11.5

Patched in:

vm2 3.11.6

Source: https://github.com/advisories/GHSA-m283-3h24-438v

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#ghsa#npm

← Back to feed