CVE-2026-92949

4 MEDIUMpublic exploit available

Published 2026-09-17 · Updated 2026-09-21

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze() and vm.readonly() protections. Attackers can use Object.getOwnPropertyDescriptor() or __lookupSetter__() to extract and invoke host object setters directly, mutating properties the embedder explicitly marked read-only.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Weaknesses

CWE-471

Public exploit & PoC references

https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff
https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff

All references

https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff
https://www.vulncheck.com/advisories/vm2-3.9.6-before-3.11.7-sandbox-bypass-via-accessor-descriptor
https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.