What’s Vulnerable › Vulnerabilities

CVE-2026-92949: vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor

• Severity: medium (CVSS 4.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-09-21
• Weakness: CWE-471

Description

vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze() and vm.readonly() protections. Attackers can use Object.getOwnPropertyDescriptor() or __lookupSetter__() to extract and invoke host object setters directly, mutating properties the embedder explicitly marked read-only.

Affected products

• patriksimek vm2: from 3.9.6 before 3.11.7 — fixed in 3.11.7

How to fix

Upgrade to a fixed version: patriksimek vm2 3.11.7. Check the vendor advisory for mitigations.

References

• https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff
• https://www.vulncheck.com/advisories/vm2-3.9.6-before-3.11.7-sandbox-bypass-via-accessor-descriptor
• https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff

Get alerted when CVE-2026-92949 or the next vulnerability affects your stack