9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-22709

CVE-2026-22709: vm2 has a Sandbox Escape

vm2 is an open source vm/sandbox for Node.js. In vm2 prior to version 3.10.2, Promise.prototype.then Promise.prototype.catch callback sanitization can be bypassed. This allows attackers to escape the sandbox and run arbitrary code. In lib/setup-sandbox.js, the callback function of localPromise.prototype.then is sanitized, but globalPromise.prototype.then is not sanitized. The return value of async functions is globalPromise object. Version 3.10.2 fixes the issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-22709

CVE-2026-22709:

9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
vm2	npm	<= 3.10.1	3.10.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the vm2 library due to an insecure implementation of the then and catch methods on the Promise object within the sandbox. These methods, located in lib/setup-sandbox.js, used Function.prototype.call to invoke the underlying promise handlers. This created a security flaw where code running inside the sandbox could override Function.prototype.call to intercept the execution flow. When an async function's promise resolved or rejected, the attacker's malicious call function would be triggered, giving it access to function references and objects from the host environment. The provided exploit leverages this by using the .catch handler to access the host's Error object, and from there, the host's Function constructor, which is then used to execute arbitrary commands on the host system, thus escaping the sandbox. The patch mitigates this by replacing the vulnerable .call() usage with Reflect.apply, which is not susceptible to the same kind of prototype-based attack.

Vulnerable functions

Promise.then

lib/setup-sandbox.js

The `then` method on the sandboxed `globalPromise` prototype was implemented using `.call()`. This allows an attacker in the sandbox to override `Function.prototype.call` to intercept the execution, gain access to host-level functions, and escape the sandbox. The vulnerability is triggered when `.then()` is called on a promise returned by an async function.

Promise.catch

lib/setup-sandbox.js

The `catch` method on the sandboxed `globalPromise` prototype was implemented using `.call()`. An attacker can override `Function.prototype.call` to intercept the execution when a promise is rejected. The exploit demonstrates gaining access to the host's `Function` constructor via the error object passed to the `catch` handler, allowing for arbitrary code execution and sandbox escape.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.