{"vulnerability": "CVE-2026-92952", "sightings": [{"uuid": "5c5ddd58-497e-47ae-85f9-448616536615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-92952", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-jf8q-945g-9q4c", "content": "", "creation_timestamp": "2026-10-01T15:42:15.000000Z"}, {"uuid": "2d3ce80b-f98f-4e34-aee4-8d9f9fea2a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92952", "type": "seen", "source": "https://gist.github.com/alon710/a8ba581cdcde8e35c7b52afd309b8b4a", "content": "# CVE-2026-92952: CVE-2026-92952: Sandbox Escape and State Corruption in vm2 via Node.js-internal Symbol Leak\n\n> **CVSS Score:** 8.9\n> **Published:** 2026-10-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-92952\n\n## Summary\nA high-severity sandbox escape and state corruption vulnerability exists in the vm2 library (versions 3.11.4 through 3.11.6). The vulnerability is caused by an incomplete blocklist of Node.js-internal registered symbols crossing the sandbox-host bridge boundary. Specifically, the filters in `lib/setup-sandbox.js` and write traps in `lib/bridge.js` omitted the symbols `nodejs.stream.disturbed` and `nodejs.stream.errored`, allowing untrusted code within the sandbox to corrupt host-realm stream state checks.\n\n## TL;DR\nAn incomplete blocklist of Node.js-internal symbols in vm2 (3.11.4-3.11.6) allows sandboxed code to access host-realm stream symbols, corrupt stream state accessors on the host, and bypass security gates.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-669\n- **Attack Vector**: Adjacent/Remote dependent on application exposure\n- **CVSS v4.0 Score**: 8.9\n- **EPSS Score**: 0.00461 (Percentile: 37.62%)\n- **Impact**: High Integrity Impact / Sandbox Escape\n- **Exploit Status**: PoC / Non-weaponized\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- vm2 library (versions 3.11.4 through 3.11.6) running on Node.js runtimes containing web streams\n- **vm2**: >= 3.11.4, <= 3.11.6 (Fixed in: `3.11.7`)\n\n## Mitigation\n\n- Upgrade vm2 dependency to version 3.11.7 immediately to apply namespace symbol filtering.\n- Migrate to process-isolated script execution architectures such as isolated-vm or isolated container sandboxes.\n- Implement strong input validation to prevent user-supplied script execution within single-isolate virtual machines.\n\n**Remediation Steps:**\n1. Identify all direct and transitive dependencies on vm2 in package.json files.\n2. Update the vm2 dependency to version 3.11.7 using npm install vm2@3.11.7 or yarn upgrade vm2@3.11.7.\n3. Validate host application behaviors by executing unit tests on stream handling mechanisms.\n4. Plan and execute an architecture migration to replace deprecated vm2 isolates with subprocess boundaries.\n\n## References\n\n- [NVD Record for CVE-2026-92952](https://nvd.nist.gov/vuln/detail/CVE-2026-92952)\n- [GitHub Security Advisory GHSA-jf8q-945g-9q4c](https://github.com/patriksimek/vm2/security/advisories/GHSA-jf8q-945g-9q4c)\n- [vm2 v3.11.7 Release Notes](https://github.com/patriksimek/vm2/releases/tag/v3.11.7)\n- [VulnCheck Advisory Portal](https://www.vulncheck.com/advisories/vm2-3.11.4-through-3.11.6-sandbox-symbol-filtering-bypass)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-92952) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-01T22:30:28.000000Z"}]}