Описание
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability is fixed in 3.11.0.
A flaw was found in vm2 (before 3.11.0). Sandboxed code can reach BaseHandler.getPrototypeOf to obtain arbitrary prototypes, enabling sandbox escape and arbitrary code execution. Fixed in 3.11.0.
Отчет
vm2 is vulnerable to sandbox escape via unrestricted access to BaseHandler.getPrototypeOf, allowing retrieval of arbitrary prototypes and host code execution. A remote unauthenticated attacker who can submit sandboxed code may escape the sandbox. Fixed in vm2 3.11.0.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Developer Hub | rhdh/rhdh-hub-rhel9 | Not affected | ||
| Red Hat Ansible Automation Platform 2.1 | ansible-automation-platform/automation-portal | Fixed | RHSA-2026:50850 | 05.08.2026 |
Показывать по
Дополнительная информация
Статус:
10 Critical
CVSS3
Связанные уязвимости
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability is fixed in 3.11.0.
Уязвимость функции BaseHandler.getPrototypeOf() библиотеки vm2 пакетного менеджера NPM, позволяющая нарушителю обойти защитный механизм песочницы и выполнить произвольный код
10 Critical
CVSS3