CVE-2026-92952

Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.4 through 3.11.6

Description Internal Node.js registered symbols are incompletely filtered across the sandbox boundary. The extraction filters in lib/setup-sandbox.js and the cross-realm symbol checks and write traps in lib/bridge.js use a fixed list of dangerous symbols that omits nodejs.stream.disturbed and nodejs.stream.errored. These symbols are exposed on host WebStream prototypes in newer Node.js releases. If an embedder exposes a host WebStream object and the host stream/web module to the sandbox, sandbox code can use Object.getOwnPropertySymbols(streamWeb.ReadableStream.prototype) to obtain these host symbols. By using them as write keys on host stream objects, an attacker can corrupt host-visible stream state, such as causing stream.Readable.isDisturbed() to return false for a consumed stream. This allows bypassing host logic that uses public stream-state helpers to enforce one-shot body consumption, reject errored streams, or determine if a stream is safe for other components.

Recommendations Update vm2 to version 3.11.7.