CVE-2026-47140 Details
Description
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, NodeVM blocks several dangerous Node.js builtins such as module, worker_threads, cluster, vm, repl, and inspector. However, the denylist misses process and inspector/promises. Both can be used from sandboxed code to reach host-side execution primitives. This allows sandboxed code to bypass the intended builtin restrictions and execute code in the host process. This issue has been patched in version 3.11.4.
A vulnerability in the vm2 library's NodeVM implementation allows sandboxed code to bypass restrictions on certain Node.js builtins and execute arbitrary code in the host process. This issue affects vm2 versions prior to 3.11.4. The vulnerability arises because the denylist for dangerous builtins, which is intended to prevent access to execution primitives, fails to include 'process' and 'inspector/promises'. As a result, code running in the sandbox can exploit these builtins to execute commands on the host system.
Users can upgrade to vm2 version 3.11.4 or later, where this vulnerability has been patched. The patch involves adding 'process' and 'inspector/promises' to the denylist and implementing a family-prefix check to block subpath variants of dangerous builtins.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 12, 2026CISA-ADP
Assessed Jun 12, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/patriksimek/vm2/commit/a1ed47a98d1cc36cb48c0d566d55889688e0b59b | [email protected] | Source CodeVendor |
| https://github.com/patriksimek/vm2/releases/tag/v3.11.4 | [email protected] | Release NotesVendor |
| https://github.com/patriksimek/vm2/security/advisories/GHSA-rp36-8xq3-r6c4 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-693 | Protection Mechanism Failure | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vm2 | <= 3.11.3 (semver) |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 12, 2026 | CVE Modified | CISA-ADP |
| Jun 12, 2026 | New CVE Received | [email protected] |