vm2 is an open source vm/sandbox for Node.js. In 3.10.5, NodeVM's require.root path restriction can be bypassed using filesystem symlinks, allowing sandboxed code to load modules from outside the allowed root directory in host context. Because path validation uses path.resolve() (which does not dereference symlinks) but module loading uses Node's native require() (which does), an attacker can load arbitrary host-realm modules and achieve remote code execution. This vulnerability is fixed in 3.11.0.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c Exploit, Mitigation, Vendor Advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c Exploit, Mitigation, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.5 · vm2_projectNVD modified 2026-10-26 17:10
Affected (CPE criteria) 1
cpe:2.3:a:vm2_project:vm2:3.10.5:*:*:*:*:node.js:*:*
References 6
- https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c Exploit, Mitigation, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:50850
- https://access.redhat.com/security/cve/CVE-2026-43998
- https://bugzilla.redhat.com/show_bug.cgi?id=2477206
- https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c Exploit, Mitigation, Vendor Advisory
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43998.json