Attack Chain

1. The attacker injects malicious JavaScript code into the vm2 sandbox.
2. The injected code manipulates the Array.prototype using Object.defineProperty.
3. The neutralizeArraySpeciesBatch method is triggered, which attempts to neutralize objects passed between the sandbox and the host.
4. The code leverages a getter on the array prototype to expose objects from the host environment into the sandbox.
5. The attacker obtains a reference to the host’s Buffer.prototype.inspect function through the exposed objects.
6. The attacker uses Buffer.prototype.inspect.constructor.constructor to obtain a reference to the host’s Function constructor.
7. The Function constructor is then used to execute arbitrary code on the host system, such as using child_process.execSync to create a file.
8. The attacker achieves remote code execution on the host, bypassing the vm2 sandbox.

Impact

Successful exploitation of this vulnerability allows attackers to execute arbitrary commands on the host system. This can lead to complete system compromise, data exfiltration, or denial-of-service. Given the widespread use of vm2 in sandboxing JavaScript code, a successful attack could have significant consequences for many applications and systems. The vulnerability has been assigned CVE-2026-44008 and is rated as critical severity.

Recommendation

• Upgrade to a patched version of vm2 (later than 3.11.1) to remediate CVE-2026-44008.
• Deploy the Sigma rule “Detect VM2 Sandbox Escape via Array Prototype Manipulation” to identify exploitation attempts within your environment.
• Enable process creation logging to allow for detection of commands executed by the escaped sandbox, as identified by the Sigma rule “Detect Host Command Execution from VM2 Sandbox”.