CVE-2026-44002

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's CallSite wrapper class (intended as a safe wrapper for V8's native CallSite) blocks getThis() and getFunction() to prevent host object leakage, but allows getFileName() to return unsanitized host absolute paths. Any sandboxed code can extract the full directory structure, library paths, and framework versions of the host server. This vulnerability is fixed in 3.11.0.

CVSS v3 5.8 MEDIUM

5.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/patriksimek/vm2/security/advisories/GHSA-v27g-jcqj-v8rw	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:*

History

26 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) vm2 es un vm/sandbox de código abierto para Node.js. Anterior a la 3.11.0, la clase envoltorio CallSite de vm2 (concebida como un envoltorio seguro para el CallSite nativo de V8) bloquea getThis() y getFunction() para evitar la fuga de objetos del host, pero permite que getFileName() devuelva rutas absolutas del host sin sanitizar. Cualquier código en sandbox puede extraer la estructura completa de directorios, las rutas de biblioteca y las versiones de framework del servidor host. Esta vulnerabilidad está corregida en la 3.11.0.

Information

Published : 2026-05-13 18:16

Updated : 2026-10-26 17:10

NVD link : CVE-2026-44002

Mitre link : CVE-2026-44002

CVE.ORG link : CVE-2026-44002

JSON object : View

Products Affected

vm2_project

vm2

CWE

CWE-209

Generation of Error Message Containing Sensitive Information

{"id": "CVE-2026-44002", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44002", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-14T18:23:24.071461Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "patriksimek", "product": "vm2", "versions": [{"status": "affected", "version": "< 3.11.0"}]}]}], "published": "2026-05-13T18:16:16.857", "references": [{"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v27g-jcqj-v8rw", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's CallSite wrapper class (intended as a safe wrapper for V8's native CallSite) blocks getThis() and getFunction() to prevent host object leakage, but allows getFileName() to return unsanitized host absolute paths. Any sandboxed code can extract the full directory structure, library paths, and framework versions of the host server. This vulnerability is fixed in 3.11.0."}, {"lang": "es", "value": "vm2 es un vm/sandbox de c\u00f3digo abierto para Node.js. Anterior a la 3.11.0, la clase envoltorio CallSite de vm2 (concebida como un envoltorio seguro para el CallSite nativo de V8) bloquea getThis() y getFunction() para evitar la fuga de objetos del host, pero permite que getFileName() devuelva rutas absolutas del host sin sanitizar. Cualquier c\u00f3digo en sandbox puede extraer la estructura completa de directorios, las rutas de biblioteca y las versiones de framework del servidor host. Esta vulnerabilidad est\u00e1 corregida en la 3.11.0."}], "lastModified": "2026-10-26T17:10:03.270", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "6DD48308-6219-4C66-9BE7-246EE56FB834", "versionEndExcluding": "3.11.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}