---
id: CVE-2026-92936
title: >-
  vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to
  sandboxed code through error stack formatting
summary: >-
  vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to
  sandboxed code through error stack formatting. Attacker-supplied code can
  force the host-realm source transformer to throw a SyntaxError (for example by
  calling ev…
severity: medium
cvss: 5.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N'
cwe:
  - CWE-209
  - CWE-497
vendor: patriksimek
product: vm2
affected:
  - vm2 >= 3.11.0 < 3.11.7
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T16:18:34.377'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92936'
references:
  - url: 'https://github.com/patriksimek/vm2/security/advisories/GHSA-x6m4-chr9-cg97'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/vm2-3.11.0-before-3.11.7-information-disclosure-via-error-stack
    label: disclosure@vulncheck.com
  - url: 'https://github.com/patriksimek/vm2/security/advisories/GHSA-x6m4-chr9-cg97'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92936.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-92936'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2536055'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-92936'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92936'
tags:
  - nvd
  - cve.org
  - exploit-available
  - csaf
  - vex
  - red-hat
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-17T15:50:38.454592Z'
ingestedAt: '2026-09-17T14:19:30.983Z'
epss: 0.00455
epssPercentile: 0.3676
---

## Overview

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source transformer to throw a SyntaxError (for example by calling eval with malformed source) and then read the error's .stack property; the bridge forwards the .stack read to the host-realm formatter, bypassing the sandbox-side host-path redaction introduced for GHSA-v27g-jcqj-v8rw. The returned stack string discloses absolute paths from vm2, Node.js internals, and the embedding application's own source tree, along with host function names. Default new VM() and new NodeVM() configurations are affected without any special options, and the issue persists when string eval is disabled because the host-side transformer throws before eval is handled. The impact is information disclosure only; no code execution results. Fixed in vm2 3.11.7.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat Developer Hub, Self-service automation portal 2 · no fix planned: Red Hat Developer Hub, Self-service automation portal 2 · updated 2026-09-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92936.json)