CVE-2026-47131
CRITICAL
10,0
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer.call.call({}.__lookupGetter__, Buffer, '__proto__'), Buffer.call.call({}.__lookupSetter__, Buffer, '__proto__'), and Node.js's ERR_INVALID_ARG_TYPE Error, the host's TypeError constructor can be obtained, which allows the escape from the sandbox. This allows attackers to run arbitrary code. This issue has been patched in version 3.11.4.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0004
Percentile
0,1th
Updated
EPSS Score Trend (Last 6 Days)
913
Improper Control of Dynamically-Managed Code Resources
IncompleteCommon Consequences
Security Scopes Affected:
Integrity
Other
Potential Impacts:
Execute Unauthorized Code Or Commands
Varies By Context
Alter Execution Logic
Applicable Platforms
Languages:
Not Language-Specific, Interpreted
https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg
https://github.com/patriksimek/vm2/commit/27c525f4615e2b983f122e2bed327d810126f…
https://github.com/patriksimek/vm2/releases/tag/v3.11.4
https://github.com/patriksimek/vm2/security/advisories/GHSA-v6mx-mf47-r5wg