CVE-2026-92956 Details
Description
vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26. WebAssembly.compileStreaming and WebAssembly.instantiateStreaming can produce a raw host-realm Promise that rejects with a host-realm error object; by controlling Symbol.species via Promise.prototype.finally, sandbox code receives that raw host error, walks from the host error constructor to the host Function constructor, and recovers the real host `process` object, gaining host Node.js capabilities (e.g. access to host modules such as fs) in the context of the process running the sandbox. No NodeVM, require permission, host object injection, or otherwise unsafe configuration is required. This is a bypass of the fix for GHSA-6j2x-vhqr-qr7q, which removed the JSPI entry points WebAssembly.promising and WebAssembly.Suspending. The issue is fixed in 3.11.7.
A sandbox escape vulnerability has been identified in vm2 versions 3.10.1 through 3.11.6. This issue arises when vm2 is used in a default 'new VM()' sandbox on Node.js 26. The vulnerability exploits WebAssembly.compileStreaming and WebAssembly.instantiateStreaming, which can generate a raw host-realm Promise that rejects with a host-realm error object. By manipulating Symbol.species through Promise.prototype.finally, sandboxed code can access this raw host error, traverse to the host Function constructor, and retrieve the actual host 'process' object. This grants access to host Node.js capabilities, such as file system modules, within the context of the running sandbox. Notably, this vulnerability does not require a NodeVM, special permissions, host object injection, or any inherently unsafe configuration. It effectively bypasses the previous fix for a related vulnerability, GHSA-6j2x-vhqr-qr7q, which had addressed similar issues with WebAssembly's Promise handling.
Users can upgrade to vm2 version 3.11.7, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 17, 2026CISA-ADP
Assessed Sep 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/patriksimek/vm2/security/advisories/GHSA-wjwh-qqvp-g4p4 | [email protected] | AdvisoryExploitTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/vm2-3.10.1-through-3.11.6-sandbox-escape-via-webassembly-compilestreaming | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-693 | Protection Mechanism Failure | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| vm2 | >= 3.10.1, <= 3.11.6 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 17, 2026 | CVE Modified | CISA-ADP |
| Sep 17, 2026 | New CVE Received | [email protected] |