CVE-2026-47135: vm2 has a sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks

May 29, 2026 (updated June 12, 2026)

vm2 3.11.2 Symbol.for override in setup-sandbox.js only intercepts 2 of 9 dangerous Node.js cross-realm symbols. Combined with the bridge’s set/defineProperty/deleteProperty traps having no isDangerousCrossRealmSymbol key check, sandbox code can obtain real cross-realm symbols, write them to host objects, and control host-side behavior — verified with a full util.promisify hijack chain.

References

github.com/advisories/GHSA-m5q2-4fm3-vfqp
github.com/patriksimek/vm2/commit/928aef51898b5c52a05f05a40c4cfeb52e172878
github.com/patriksimek/vm2/releases/tag/v3.11.4
github.com/patriksimek/vm2/security/advisories/GHSA-m5q2-4fm3-vfqp
nvd.nist.gov/vuln/detail/CVE-2026-47135

Code Behaviors & Features

Detect and mitigate CVE-2026-47135 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →