PT-2026-38396 · Npm · Vm2

Hongancalif · Published 2026-05-07 · Updated 2026-06-04 · CVE-2026-44005

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions vm2 versions 3.9.6 through 3.10.5

Description The bridge in vm2 exposes mutable proxies for host-realm intrinsic prototypes and forwards sandbox writes into underlying host objects using otherReflectSet() and otherReflectDefineProperty(). This allows attacker-controlled JavaScript running in a default VM or inherited NodeVM to mutate shared host Object.prototype, Array.prototype, and Function.prototype from within the sandbox, leading to prototype pollution and sandbox escape. The issue occurs because BaseHandler.apply() invokes host functions that can surface a prototype getter, and BaseHandler.get() allows an attacker to reuse the host lookupGetter (' proto ') accessor to reach host prototypes. Subsequently, BaseHandler.set() and BaseHandler.defineProperty() write attacker-controlled data directly into shared host objects.

Recommendations Update to version 3.11.0.

Exploit

Fix

Code Injection

Prototype Pollution

Weakness Enumeration

CWE-94

CWE-1321

Related Identifiers

BDU:2026-06914

CVE-2026-44005

GHSA-VWRP-X96C-MHWQ

Affected Products

Vm2

References · 10

• 🔥 https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq · Exploit
• https://bdu.fstec.ru/vul/2026-06914 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44005 · Security Note
• https://osv.dev/vulnerability/ROOT-APP-NPM-CVE-2026-44005 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vwrp-x96c-mhwq · Vendor Advisory
• https://github.com/patriksimek/vm2 · Note
• https://github.com/patriksimek/vm2/releases/tag/v3.11.0 · Note
• https://twitter.com/DFIR_Lab/status/2059798143089197210 · Twitter Post
• https://twitter.com/PurpleOps_io/status/2054781781623099603 · Twitter Post
• https://t.me/cveNotify/163479 · Telegram Post