PT-2026-45022 · Root+3 · @Rootio/Vm2+1

CVE-2026-47139 · Published 2026-05-29 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.4

Description NodeVM allows the exclusion of public network builtins from the wildcard builtin option, which blocks direct access to modules such as 'http', 'https', 'http2', 'net', 'dgram', 'tls', 'dns', and 'dns/promises'. However, Node.js also exposes internal HTTP builtins starting with underscores, such as http client and http server, which are not blocked by this configuration. Sandboxed code can utilize these internal builtins to perform outbound HTTP requests and open listening HTTP sockets, bypassing the intended network restrictions. This network capability bypass can lead to Server-Side Request Forgery (SSRF), allowing access to localhost services, metadata endpoints, or internal admin panels reachable from the host process.

Recommendations Update to version 3.11.4.

Exploit

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2026-47139

GHSA-R9PM-GXMW-WV6P

Affected Products

@Rootio/Vm2

Vm2

References · 10

• 🔥 https://github.com/patriksimek/vm2/security/advisories/GHSA-r9pm-gxmw-wv6p · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47139.json · Exploit
• https://osv.dev/vulnerability/GHSA-r9pm-gxmw-wv6p · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47139 · Security Note
• https://osv.dev/vulnerability/ROOT-APP-NPM-CVE-2026-47139 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-47139 · Vendor Advisory
• https://github.com/patriksimek/vm2/commit/436053e30eecbabd487e2fd2959c137ac34e2bb1 · Note
• https://github.com/patriksimek/vm2/releases/tag/v3.11.4 · Note
• https://github.com/patriksimek/vm2 · Note
• https://twitter.com/VulmonFeeds/status/2065501629130969511 · Twitter Post