CVE-2026-44007: vm2 NodeVM `nesting: true` bypasses `require: false` allowing sandbox escape and arbitrary OS command execution
(updated )
When a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') regardless of the outer VM’s require configuration — including require: false. With access to vm2, the sandbox constructs a new inner NodeVM with its own unrestricted require settings and executes arbitrary OS commands on the host. Any application that runs untrusted code inside a NodeVM with nesting: true is fully compromised.
References
- access.redhat.com/errata/RHSA-2026:50850
- access.redhat.com/security/cve/CVE-2026-44007
- bugzilla.redhat.com/show_bug.cgi?id=2477198
- github.com/advisories/GHSA-8hg8-63c5-gwmx
- github.com/patriksimek/vm2/commit/46cbbdde4e19b743974c942278080231004146ca
- github.com/patriksimek/vm2/releases/tag/v3.11.1
- github.com/patriksimek/vm2/security/advisories/GHSA-8hg8-63c5-gwmx
- nvd.nist.gov/vuln/detail/CVE-2026-44007
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44007.json
Code Behaviors & Features
Detect and mitigate CVE-2026-44007 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →