Product
CVE-2026-93605 is a sandbox escape vulnerability in the vm2 library that allows attackers to execute arbitrary system commands via the improperly restricted child_process module.