{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/patrik-simek/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["vm2 (\u003c= 3.11.5)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Patrik Simek"],"content_html":"\u003cp\u003eThe vm2 library, a common JavaScript sandbox utility, is susceptible to a critical sandbox breakout vulnerability identified as CVE-2026-47698. This issue arises because the library's mitigation for previous sandbox escapes was insufficient; specifically, the input validation logic failed to account for indirect function calls constructed via specific \u003ccode\u003eBuffer.call\u003c/code\u003e chains.\u003c/p\u003e\n\u003cp\u003eAn attacker capable of executing arbitrary JavaScript within the vm2 context can leverage this flaw to manipulate object prototypes and bypass sandbox restrictions. By exploiting the \u003ccode\u003eWebAssembly.compileStreaming\u003c/code\u003e mechanism and triggering exceptions, an attacker can access the host's \u003ccode\u003eprocess\u003c/code\u003e object. This grants the ability to utilize Node.js modules like \u003ccode\u003echild_process\u003c/code\u003e to execute arbitrary commands on the host system, effectively bypassing the security isolation boundary. This vulnerability affects all versions of vm2 up to and including 3.11.5. Organizations utilizing this library for untrusted code execution are at significant risk of remote code execution.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation leads to full Remote Code Execution (RCE) on the host environment where the vm2-sandboxed code is running. This allows an attacker to bypass all intended isolation restrictions, potentially leading to unauthorized data access, system compromise, or lateral movement within the infrastructure hosting the Node.js application.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the vm2 package to a version that contains the patch for CVE-2026-47698.\u003c/li\u003e\n\u003cli\u003eReview all applications utilizing vm2 for untrusted input and evaluate migration to modern alternative sandboxing solutions, as vm2 has historically suffered from repeated sandbox escape vulnerabilities.\u003c/li\u003e\n\u003cli\u003eImplement process-level sandboxing (such as containers or gVisor) to provide defense-in-depth, ensuring that even if a language-level sandbox is breached, the attacker remains contained within a restricted environment.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-17T18:45:40Z","date_published":"2026-08-17T18:45:40Z","id":"https://feed.craftedsignal.io/briefs/2026-08-vm2-sandbox-breakout/","summary":"The vm2 sandbox library is vulnerable to a sandbox breakout (CVE-2026-47698) due to insufficient validation of indirect calls, allowing attackers to execute arbitrary system commands on the host.","title":"Critical Sandbox Escape Vulnerability in vm2","url":"https://feed.craftedsignal.io/briefs/2026-08-vm2-sandbox-breakout/"}],"language":"en","title":"CraftedSignal Threat Feed - Patrik Simek","version":"https://jsonfeed.org/version/1.1"}