https://vulnerability.circl.lu/sightings/feed 2026-10-09T09:07:15.900493+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ddd2ba40-5d09-4ba2-99b1-a670287e9645/export 2026-10-09T09:07:15.987133+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ddd2ba40-5d09-4ba2-99b1-a670287e9645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92945", "type": "seen", "source": "https://gist.github.com/alon710/6cfe4dbe62cd03538dfef38f32b35ab8", "content": "# CVE-2026-92945: CVE-2026-92945: Sandbox Escape and Module Allowlist Bypass via Path Prefix Matching in vm2\n\n> **CVSS Score:** 4.2\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92945\n\n## Summary\nA module allowlist bypass vulnerability (CVE-2026-92945 / GHSA-7q3f-wx44-378m) was identified in the vm2 sandboxing library prior to version 3.11.7. This flaw permits unauthenticated or untrusted code running within the sandbox environment to bypass explicit module restrictions. When the transitive resolution option is disabled, the system fails to validate file system path boundaries, allowing prefix-sharing sibling directories to be resolved and loaded, thereby escaping intended sandbox restrictions.\n\n## TL;DR\nA path traversal and module allowlist bypass flaw in vm2's legacy resolver allows sandboxed code to load un-allowlisted sibling packages that share a lexical prefix with allowlisted modules.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability ID**: CVE-2026-92945 / GHSA-7q3f-wx44-378m\n- **CWE ID**: CWE-22 (Path Traversal), CWE-863 (Incorrect Authorization)\n- **Attack Vector**: Network (AV:N)\n- **Attack Complexity**: High (AC:H)\n- **CVSS v3.1 Score**: 4.2 (Medium)\n- **EPSS Score**: 0.00277 (18.25th percentile)\n- **Exploit Status**: Proof of Concept available\n- **CISA KEV Status**: Not listed\n\n## Affected Systems\n\n- vm2 Node.js sandboxing library\n- **vm2**: >= 0, < 3.11.7 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 to 3.11.7 or later.\n- Avoid using 'transitive: false' options with shared sibling directories.\n- Employ strict path normalization and canonicalization before verification checks.\n\n**Remediation Steps:**\n1. Identify vulnerable vm2 dependencies using 'npm audit' or 'yarn audit'.\n2. Update the dependency declaration of vm2 in package.json to '^3.11.7'.\n3. Verify that no prefix-sharing modules exist alongside sandboxed dependencies in the deployment environment.\n\n## References\n\n- [GitHub Security Advisory GHSA-7q3f-wx44-378m](https://github.com/patriksimek/vm2/security/advisories/GHSA-7q3f-wx44-378m)\n- [Fix Commit 6ac3916da84e060c403e407b6b6318fcc66b0e72](https://github.com/patriksimek/vm2/commit/6ac3916da84e060c403e407b6b6318fcc66b0e72)\n- [vm2 Release v3.11.7](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/vm2-before-3.11.7-module-allowlist-bypass-via-prefix-matching)\n- [NVD - CVE-2026-92945](https://nvd.nist.gov/vuln/detail/CVE-2026-92945)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92945) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T12:30:31.000000Z"} 2026-10-02T12:30:31+00:00