CVE-2026-92957

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.11.7

Description NodeVM fails to normalize node:-prefixed builtin specifiers when evaluating negative (deny) entries in a wildcard require policy. While the node: prefix is stripped during resolution, negative wildcard entries are matched using exact string comparison against canonical builtin names. Consequently, a policy intended to deny a module using the node: prefix fails to block the canonical version. This allows sandboxed code to access the host child process builtin via require('child process') or require('node:child process'), providing access to process-spawning APIs such as execSync() and spawn(), which enables host command execution.

Recommendations Update to version 3.11.7.