{"uuid": "6cd7587c-f16b-46b2-b8c5-7bdff938ce63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92941", "type": "seen", "source": "https://gist.github.com/alon710/9ce08c3782a7543f3e1b75e57f063eef", "content": "# CVE-2026-92941: CVE-2026-92941: Sandbox Escape and Process-Wide TLS Trust Store Manipulation in vm2\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92941\n\n## Summary\nCVE-2026-92941 is a critical sandbox-escape and trust-manipulation vulnerability in the vm2 library (versions 3.11.3 to 3.11.6). This security flaw allows untrusted code executing within a NodeVM sandbox environment to compromise the global TLS trust store of the host Node.js process. By leveraging a design flaw where the host's native 'tls.setDefaultCACertificates' can be executed via a proxy wrapper, combined with a bridge unwrapping bypass in the 'url' module, an attacker can modify the process-wide default root Certificate Authorities. Consequently, all subsequent outbound TLS/HTTPS clients running on the host thread are forced to trust attacker-signed certificates, facilitating transparent Man-in-the-Middle (MitM) attacks. The vulnerability was resolved in version 3.11.7 of vm2 by introducing built-in member-level sanitization before applying read-only proxy wrappers.\n\n## TL;DR\nA critical flaw in vm2 (3.11.3-3.11.6) allows sandboxed code to bypass isolation and overwrite the global Node.js root CAs, enabling complete Man-in-the-Middle compromise of outbound host HTTPS connections.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-732\n- **Attack Vector**: Network / Code Execution Boundary\n- **CVSS Score**: 10.0\n- **EPSS Score**: 0.00289\n- **Impact**: Process-Wide TLS Trust Store Compromise\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Applications utilizing the vm2 Node.js library configured with a NodeVM instance that permits access to both 'tls' and 'url' built-in modules.\n- **vm2**: >= 3.11.3, < 3.11.7 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 dependency to version 3.11.7 or later.\n- Audit allowed sandbox modules and disable 'tls' or 'url' unless strictly required.\n- Migrate the application away from the deprecated vm2 library to secure isolated runtimes.\n\n**Remediation Steps:**\n1. Inspect package.json and update vm2 to version 3.11.7.\n2. If upgrading is not immediate, modify NodeVM options to remove 'tls' and 'url' from the allowed builtin array.\n3. Initiate migration plans to move sandboxed scripts to separate worker_threads, WebAssembly sandboxes, or containerized environments.\n\n## References\n\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-92941)\n- [NVD Record](https://nvd.nist.gov/vuln/detail/CVE-2026-92941)\n- [GitHub Security Advisory](https://github.com/patriksimek/vm2/security/advisories/GHSA-98xx-8mx4-x7cm)\n- [Official Remediation Commit](https://github.com/patriksimek/vm2/commit/aa146a77f859325e079f3bfbfe6d8309af483daa)\n- [Official Release v3.11.7](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92941) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T11:30:31.000000Z"}