CVE-2026-43998

vm2 is an open source vm/sandbox for Node.js. In 3.10.5, NodeVM's require.root path restriction can be bypassed using filesystem symlinks, allowing sandboxed code to load modules from outside the allowed root directory in host context. Because path validation uses path.resolve() (which does not dereference symlinks) but module loading uses Node's native require() (which does), an attacker can load arbitrary host-realm modules and achieve remote code execution. This vulnerability is fixed in 3.11.0.

CVSS v3 8.5 HIGH

8.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c	Exploit Mitigation Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:50850
https://access.redhat.com/security/cve/CVE-2026-43998
https://bugzilla.redhat.com/show_bug.cgi?id=2477206
https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c	Exploit Mitigation Vendor Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43998.json

Configurations

Configuration 1 (hide)

cpe:2.3:a:vm2_project:vm2:3.10.5:*:*:*:*:node.js:*:*

History

26 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) vm2 es una máquina virtual/sandbox de código abierto para Node.js. En 3.10.5, la restricción de ruta require.root de NodeVM puede ser eludida usando enlaces simbólicos del sistema de archivos, permitiendo que el código en el sandbox cargue módulos desde fuera del directorio raíz permitido en el contexto del host. Debido a que la validación de rutas usa path.resolve() (que no desreferencia enlaces simbólicos) pero la carga de módulos usa el require() nativo de Node (que sí lo hace), un atacante puede cargar módulos arbitrarios del ámbito del host y lograr ejecución remota de código. Esta vulnerabilidad está corregida en 3.11.0.

Information

Published : 2026-05-13 18:16

Updated : 2026-10-26 17:10

NVD link : CVE-2026-43998

Mitre link : CVE-2026-43998

CVE.ORG link : CVE-2026-43998

JSON object : View

Products Affected

vm2_project

vm2

CWE

CWE-59

Improper Link Resolution Before File Access ('Link Following')

{"id": "CVE-2026-43998", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43998", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-14T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "patriksimek", "product": "vm2", "versions": [{"status": "affected", "version": "3.10.5"}]}]}, {"source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "affectedData": [{"cpes": ["cpe:/a:redhat:ansible_portal:2.1"], "vendor": "Red Hat", "product": "Red Hat Ansible Automation Platform 2.1", "versions": [{"status": "unaffected", "version": "1785854226", "lessThan": "*", "versionType": "rpm"}], "packageName": "ansible-automation-platform/automation-portal", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhdh:1"], "vendor": "Red Hat", "product": "Red Hat Developer Hub", "packageName": "rhdh/rhdh-hub-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}]}], "published": "2026-05-13T18:16:16.317", "references": [{"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:50850", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-43998", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477206", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}, {"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}, {"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43998.json", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-59"}]}, {"type": "Secondary", "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c", "description": [{"lang": "en", "value": "CWE-59"}]}], "descriptions": [{"lang": "en", "value": "vm2 is an open source vm/sandbox for Node.js. In 3.10.5, NodeVM's require.root path restriction can be bypassed using filesystem symlinks, allowing sandboxed code to load modules from outside the allowed root directory in host context. Because path validation uses path.resolve() (which does not dereference symlinks) but module loading uses Node's native require() (which does), an attacker can load arbitrary host-realm modules and achieve remote code execution. This vulnerability is fixed in 3.11.0."}, {"lang": "es", "value": "vm2 es una m\u00e1quina virtual/sandbox de c\u00f3digo abierto para Node.js. En 3.10.5, la restricci\u00f3n de ruta require.root de NodeVM puede ser eludida usando enlaces simb\u00f3licos del sistema de archivos, permitiendo que el c\u00f3digo en el sandbox cargue m\u00f3dulos desde fuera del directorio ra\u00edz permitido en el contexto del host. Debido a que la validaci\u00f3n de rutas usa path.resolve() (que no desreferencia enlaces simb\u00f3licos) pero la carga de m\u00f3dulos usa el require() nativo de Node (que s\u00ed lo hace), un atacante puede cargar m\u00f3dulos arbitrarios del \u00e1mbito del host y lograr ejecuci\u00f3n remota de c\u00f3digo. Esta vulnerabilidad est\u00e1 corregida en 3.11.0."}], "lastModified": "2026-10-26T17:10:03.270", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vm2_project:vm2:3.10.5:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "C6CF5783-8EBF-4BF6-B816-055195F260E3"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}