vm2 Sandbox Escape vulnerability
Priority HIGH 84CWE-913Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat.
Summary
vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects passed to `Error.prepareStackTrace` in case of unhandled async errors. A threat actor could bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version 3.9.15 of vm2. There are no known workarounds.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.63186 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Partial vm2 (patriksimek): 3.9.15vm2 (npm): 3.9.15Red Hat: 4 advisoriesRed Hat: 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| patriksimek | vm2 | before 3.9.15 | 3.9.15 | Patch available | CNA |
| — | vm2 (npm) | before 3.9.15 | 3.9.15 | Patch available | GHSA-7jxr-cg7f-gpgv |
- vm2 Vendorpatriksimek Affected before 3.9.15 Fixed in 3.9.15 Patch available CNA
- vm2 (npm) Vendor— Affected before 3.9.15 Fixed in 3.9.15 Patch available GHSA-7jxr-cg7f-gpgv
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:* | before 3.9.15 | Vulnerable | patriksimek |
- cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:* Versions before 3.9.15 Vulnerable ·patriksimek
Remediation
- Fix · CNA vm2 (patriksimek) Fixed in 3.9.15
- Fix · GHSA-7jxr-cg7f-gpgv vm2 (npm) Fixed in 3.9.15 Advisory →
Red Hat 4 advisories
- RHSA-2023:1896 Released 2023-04-20 · Red Hat rating CriticalRed Hat Advanced Cluster Management 2.5 hotfix security update for console
- Red Hat Advanced Cluster Management for Kubernetes 2.5 for RHEL 8 rhacm2/console-rhel8
- RHSA-2023:1897 Released 2023-04-20 · Red Hat rating CriticalRed Hat Advanced Cluster Management 2.6 hotfix security update for console
- Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8 rhacm2/console-rhel8
- RHSA-2023:1894 Released 2023-04-20 · Red Hat rating CriticalMulticluster Engine for Kubernetes 2.1 hotfix security update for console
- multicluster engine for Kubernetes 2.1 for RHEL 8 multicluster-engine/console-mce-rhel8, multicluster-engine/multicluster-engine-console-mce-rhel8
Show 1 more Red Hat advisories
- RHSA-2023:1893 Released 2023-04-20 · Red Hat rating CriticalMulticluster Engine for Kubernetes 2.0 hotfix security update for console
- multicluster engine for Kubernetes 2.0 for RHEL 8 multicluster-engine/console-mce-rhel8, multicluster-engine/multicluster-engine-console-mce-rhel8
Vendor assessments
Red Hat
Red Hat rating: Critical. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Advanced Cluster Management for Kubernetes 2 | Affected | No fix yet |
Timeline
- 2026-10-02 Threatist record created from CVE-2023-29017
- 2026-10-03 Alias added: GHSA-7jxr-cg7f-gpgv
References
Exploit 2
Advisory 2
More patriksimek Vm2 vulnerabilities
- TI-2023-14382 Sandbox Escape in vm2 CVSS 3.1CRITICAL 10.0
- TI-2026-33200 vm2: Sandbox Breakout Using Async Generator CVSS 3.1CRITICAL 9.8
- TI-2026-32052 vm2: Sandbox Breakout Through Null Proto Exception CVSS 3.1CRITICAL 9.8
- TI-2026-32051 vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` CVSS 3.1CRITICAL 9.8
- TI-2026-32049 vm2: Sandbox Escape CVSS 3.1CRITICAL 10.0
- TI-2026-32048 vm2: Sandbox escape CVSS 3.1CRITICAL 10.0
Sources
- CVE-2023-29017 · CVE Program
- CVE-2023-29017 · NVD
- FIRST EPSS
- GHSA-7jxr-cg7f-gpgv · GitHub Advisory Database · CC BY 4.0
- CVE-2023-29017 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences