PT-2026-38390 · Npm · Vm2

Bugbunny-Research · Published 2026-05-01 · Updated 2026-06-10 · CVE-2026-43999

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.0

Description NodeVM's builtin allowlist can be bypassed when the module builtin is allowed, including when the * wildcard is used. The module builtin exposes Node's Module. load() function, which loads any module by name directly in the host context, completely bypassing restrictions. This allows sandboxed code to load excluded builtins, such as child process, leading to remote code execution on the host system.

Recommendations Update to version 3.11.0. As a temporary workaround, explicitly exclude the module builtin from the allowlist configuration to prevent sandboxed code from accessing Module. load().

Exploit

Fix

RCE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2026-06908

CVE-2026-43999

GHSA-947F-4V7F-X2V8

Affected Products

Vm2

References · 9

• 🔥 https://github.com/patriksimek/vm2/security/advisories/GHSA-947f-4v7f-x2v8 · Exploit
• https://osv.dev/vulnerability/GHSA-947f-4v7f-x2v8 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06908 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43999 · Security Note
• https://osv.dev/vulnerability/ROOT-APP-NPM-CVE-2026-43999 · Vendor Advisory
• https://github.com/patriksimek/vm2 · Note
• https://twitter.com/lyrie_ai/status/2064554676582834649 · Twitter Post
• https://twitter.com/jelizor/status/2059202279341768816 · Twitter Post
• https://t.me/cveNotify/163478 · Telegram Post