PT-2026-45023 · Npm+1 · Vm2

Published 2026-05-29 · Updated 2026-06-12 · CVE-2026-47141

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.4

Description NodeVM exposes process-wide observability builtins when they are permitted via require.builtin. Specifically, the diagnostics channel, async hooks, and perf hooks modules are not included in the dangerous builtin denylist. Because these modules operate on a process-wide level rather than being sandbox-local, sandboxed code can use them to observe host application data across the vm2 boundary. This can lead to the exposure of sensitive host process state, such as HTTP request headers (including Authorization or session tokens) via diagnostics channel, host AsyncResource data via async hooks.executionAsyncResource(), and host performance timeline entries via perf hooks.performance.getEntriesByType('mark').

Recommendations Update to version 3.11.4. As a temporary workaround, restrict the use of diagnostics channel, async hooks, and perf hooks builtins within the sandbox configuration.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2026-47141

GHSA-9G8X-92Q2-P28F

Affected Products

Vm2

References · 7

• 🔥 https://github.com/patriksimek/vm2/security/advisories/GHSA-9g8x-92q2-p28f · Exploit
• https://osv.dev/vulnerability/GHSA-9g8x-92q2-p28f · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47141 · Security Note
• https://github.com/patriksimek/vm2 · Note
• https://github.com/patriksimek/vm2/releases/tag/v3.11.4 · Note
• https://github.com/patriksimek/vm2/commit/e1c48fce05189f48e71efbd32af0754efa4066bb · Note
• https://twitter.com/VulmonFeeds/status/2065499068764139724 · Twitter Post