CVE-2026-92949

MEDIUM 4.0

vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor

CVSS Score

4.0

EPSS Score

0.0%

EPSS Percentile

0th

vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze() and vm.readonly() protections. Attackers can use Object.getOwnPropertyDescriptor() or __lookupSetter__() to extract and invoke host object setters directly, mutating properties the embedder explicitly marked read-only.

CWE	CWE-471
Vendor	patriksimek
Product	vm2
Published	Sep 17, 2026

Stay Ahead of the Next One

Get instant alerts for patriksimek vm2

Be the first to know when new medium vulnerabilities affecting patriksimek vm2 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

Low

Availability

None

Affected Versions

patriksimek / vm2

3.9.6 < 3.11.7

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff vulncheck.com: https://www.vulncheck.com/advisories/vm2-3.9.6-before-3.11.7-sandbox-bypass-via-accessor-descriptor

Credits

🔍 oran-s