Critical severity · published May 4, 2026
CVE-2026-24781
vm2: Sandbox Breakout Through Inspect
9.8
CVSS
1.2%
EPSS
No
On KEV
Description
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.11.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
vm2 · patriksimek
< 3.11.0 · source: vendor, NVD
RH
Red Hat Developer Hub · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Developer Hub 1.10 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Developer Hub 1.9 · Red Hat
All versions, or not specified · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-24781
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-24781
Patch
https://github.com/patriksimek/vm2/commit/8d30d93213c1898b3e035298b89a814970dd1189
Patch
https://github.com/patriksimek/vm2/commit/bdd3d15e57bc4ec5e70365cd79f7cb0256e5f88c
Patch
https://github.com/patriksimek/vm2/commit/fd266d084e0a3322d0f71ba2a8dc4c96cd030228
Release Notes
https://github.com/patriksimek/vm2/releases/tag/v3.11.0
Exploit
https://github.com/patriksimek/vm2/security/advisories/GHSA-v37h-5mfm-c47c
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:26234
More from vm2
10.0
CVE-2026-93606
vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species
10.0
CVE-2026-93605
vm2 NodeVM before 3.12.1 Remote Code Execution via child_process
10.0
CVE-2026-93603
vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function
10.0
CVE-2026-92960
vm2 before 3.11.6 Process-wide State Exposure via os and dns
10.0
CVE-2026-92956
vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming