CVE-2026-92953: vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix
vm2’s current host-intrinsic prototype protection is incomplete. The fix for GHSA-vwrp-x96c-mhwq blocks sandbox writes into classic host intrinsics such as Object.prototype, Array.prototype, and Function.prototype, but current head still lets sandbox code in a default VM reach and mutate host Uint8Array.prototype, %TypedArray%.prototype, and ArrayBuffer.prototype.
After VM.run() returns, normal host typed-array and ArrayBuffer objects observe attacker-controlled properties and methods installed by the sandbox.
References
- github.com/advisories/GHSA-3vgf-8m4q-q4qr
- github.com/patriksimek/vm2/commit/92a10fca7b3ca63bb1574b6795540264f6805b30
- github.com/patriksimek/vm2/releases/tag/v3.11.8
- github.com/patriksimek/vm2/security/advisories/GHSA-3vgf-8m4q-q4qr
- nvd.nist.gov/vuln/detail/CVE-2026-92953
- www.vulncheck.com/advisories/vm2-3.11.0-through-3.11.7-prototype-pollution-via-typedarray
Code Behaviors & Features
Detect and mitigate CVE-2026-92953 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →