PT-2026-45031 · Npm · Vm2

CVE-2026-47208 · Published 2026-05-29 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.4

Description A sandbox breakout exists that allows attackers to escape the VM2 sandbox and execute arbitrary commands on the host system. The issue occurs because the localPromise constructor calls this.then(undefined, eater) without calling resetPromiseSpecies. This omission allows a custom promise to supply a custom reject method to the executor, enabling the attacker to obtain a raw host error and break out of the sandbox.

Recommendations Update to version 3.11.4.

Exploit

Fix

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2026-47208

GHSA-76W7-J9CQ-RX2J

Affected Products

Vm2

References · 14

• 🔥 https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47208.json · Exploit
• https://osv.dev/vulnerability/ROOT-APP-NPM-CVE-2026-47208 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-47208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47208 · Security Note
• https://osv.dev/vulnerability/GHSA-76w7-j9cq-rx2j · Vendor Advisory
• https://github.com/patriksimek/vm2/releases/tag/v3.11.4 · Note
• https://github.com/patriksimek/vm2/commit/a462655009669c3124ee39498121651597529ea8 · Note
• https://github.com/patriksimek/vm2 · Note
• https://twitter.com/HugoValters/status/2065782236994019568 · Twitter Post
• https://twitter.com/KaitanSecurity/status/2067989547485392990 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2065493948672467151 · Twitter Post
• https://twitter.com/SecAlertsCo/status/2060566568598143238 · Twitter Post
• https://twitter.com/DFIR_Lab/status/2065586287139069969 · Twitter Post