vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26. WebAssembly.compileStreaming and WebAssembly.instantiateStreaming can produce a raw host-realm Promise that rejects with a host-realm error object; by controlling Symbol.species via Promise.prototype.finally, sandbox code receives that raw host error, walks from the host error constructor to the host Function constructor, and recovers the real host `process` object, gaining host Node.js capabilities (e.g. access to host modules such as fs) in the context of the process running the sandbox. No NodeVM, require permission, host object injection, or otherwise unsafe configuration is required. This is a bypass of the fix for GHSA-6j2x-vhqr-qr7q, which removed the JSPI entry points WebAssembly.promising and WebAssembly.Suspending. The issue is fixed in 3.11.7.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox
    when running on Node.js 26. WebAssembly.compileStreaming and WebAssembly.instantiateStreaming can produce
    a raw host-realm Promise that rejects with a host-realm error object; by controlling Symbol.species via
    Promise.prototype.finally, sandbox code receives that raw host error, walks from the host error
    constructor to the host Function constructor, and recovers the real host `process` object, gaining host
    Node.js capabilities (e.g. access to host modules such as fs) in the context of the process running the
    sandbox. No NodeVM, require permission, host object injection, or otherwise unsafe configuration is
    required. This is a bypass of the fix for GHSA-6j2x-vhqr-qr7q, which removed the JSPI entry points
    WebAssembly.promising and WebAssembly.Suspending. The issue is fixed in 3.11.7. (CVE-2026-92956)

ID	Name	Product	Family	Type	Severity
473538	Echo: vm2: security update to 3.11.7	Tenable Cloud Security	Echo Local Security Checks	Local	critical
473538	Echo: vm2: security update to 3.11.7	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
473034	SCA: security update for vm2 (GHSA-wjwh-qqvp-g4p4)	Tenable Cloud Security	SCA Checks	Local	critical
473034	SCA: security update for vm2 (GHSA-wjwh-qqvp-g4p4)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2026-92956

critical

Tenable Plugins

critical

critical

critical

critical