CVE-2026-26956 in vm2정보

요약

\~에 의해 MITRE • 2026. 05. 04.

vm2 is an open source vm/sandbox for Node.js. In version 3.10.4, vm2 is vulnerable to full sandbox escape with arbitrary code execution. Attacker code inside VM.run() obtains host process object and runs host commands with zero host cooperation. This issue has been patched in version 3.10.5.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

GitHub M

예약하다

2026. 02. 16.

공개

2026. 05. 04.

모더레이션

수락

항목

VDB-361005

CPE

준비됨

CWE

CWE-693 (확인됨)

CVSS

9.8 (CNA)

EPSS

0.00118

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-26956
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-26956
CVE Details	https://www.cvedetails.com/cve/CVE-2026-26956/

◂ 이전 개요 다음 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!