An attacker capable of executing arbitrary JavaScript within the vm2 context can leverage this flaw to manipulate object prototypes and bypass sandbox restrictions. By exploiting the WebAssembly.compileStreaming mechanism and triggering exceptions, an attacker can access the host's process object. This grants the ability to utilize Node.js modules like child_process to execute arbitrary commands on the host system, effectively bypassing the security isolation boundary. This vulnerability affects all versions of vm2 up to and including 3.11.5. Organizations utilizing this library for untrusted code execution are at significant risk of remote code execution.

Impact

Successful exploitation leads to full Remote Code Execution (RCE) on the host environment where the vm2-sandboxed code is running. This allows an attacker to bypass all intended isolation restrictions, potentially leading to unauthorized data access, system compromise, or lateral movement within the infrastructure hosting the Node.js application.

Recommendation

• Upgrade the vm2 package to a version that contains the patch for CVE-2026-47698.
• Review all applications utilizing vm2 for untrusted input and evaluate migration to modern alternative sandboxing solutions, as vm2 has historically suffered from repeated sandbox escape vulnerabilities.
• Implement process-level sandboxing (such as containers or gVisor) to provide defense-in-depth, ensuring that even if a language-level sandbox is breached, the attacker remains contained within a restricted environment.