Medium severity4.0NVD Advisory· Published Sep 17, 2026· Updated Sep 21, 2026
CVE-2026-92949
CVE-2026-92949
Description
vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze() and vm.readonly() protections. Attackers can use Object.getOwnPropertyDescriptor() or __lookupSetter__() to extract and invoke host object setters directly, mutating properties the embedder explicitly marked read-only.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
vm2npm | >= 3.9.6, < 3.11.7 | 3.11.7 |
Affected products
3<3.11.7+ 1 more
- (no CPE)range: <3.11.7
- (no CPE)range: >=3.9.6,<3.11.7
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-633r-hq9m-c4ffghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-92949ghsaADVISORY
- github.com/patriksimek/vm2/commit/d6ef73bd46488102dae8f4bc35f3f3c0eba2ea64ghsaWEB
- github.com/patriksimek/vm2/releases/tag/v3.11.7ghsaWEB
- github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ffnvdWEB
- www.vulncheck.com/advisories/vm2-3.9.6-before-3.11.7-sandbox-bypass-via-accessor-descriptornvdWEB
News mentions
1- vm2 npm Package: 25 Critical Sandbox Escape Vulnerabilities Disclosed TogetherVypr Intelligence · Sep 18, 2026