Skip to content
Threat Feed

Product

Vm2 (<= 3.11.0)

1 brief RSS
critical advisory

vm2 NodeVM Nesting Bypass Allows Arbitrary Command Execution

A vulnerability in vm2's NodeVM, when nesting is enabled, allows sandbox code to bypass require restrictions, enabling arbitrary OS command execution on the host.

vm2 sandbox-escape code-execution
2r 2t