vm2 is an open source vm/sandbox for Node.js. In vm2 prior to version 3.10.2, `Promise.prototype.then` `Promise.prototype.catch` callback sanitization can be bypassed. This allows attackers to escape the sandbox and run arbitrary code. In lib/setup-sandbox.js, the callback function of `localPromise.prototype.then` is sanitized, but `globalPromise.prototype.then` is not sanitized. The return value of async functions is `globalPromise` object. Version 3.10.2 fixes the issue.

This critical sandbox escape vulnerability affects the Node.js library and can be abused to execute commands. Immediate patching is recommended.

The version of the Node.js module vm2 installed on the remote host is prior to 3.10.2. It is, therefore affected by a sandbox breakout vulnerability due to a flaw with the `Promise.prototype.then` and `Promise.prototype.catch` callback sanitization. An unauthenticated, remote attacker can exploit this, to escape the sandbox and run arbitrary code.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - vm2 is an open source vm/sandbox for Node.js. In vm2 prior to version 3.10.2, `Promise.prototype.then`
    `Promise.prototype.catch` callback sanitization can be bypassed. This allows attackers to escape the
    sandbox and run arbitrary code. In lib/setup-sandbox.js, the callback function of
    `localPromise.prototype.then` is sanitized, but `globalPromise.prototype.then` is not sanitized. The
    return value of async functions is `globalPromise` object. Version 3.10.2 fixes the issue.
    (CVE-2026-22709)

ID	Name	Product	Family	Type	Severity
297233	Node.js Module vm2 < 3.10.2 Sandbox Breakout	Nessus	Misc.	Local	critical
437379	SCA: security update for vm2 (GHSA-99p7-6v5w-7xg8)	Tenable Cloud Security	SCA Checks	Local	critical
437379	SCA: security update for vm2 (GHSA-99p7-6v5w-7xg8)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2026-22709

critical

Tenable Plugins

critical

critical

critical