Critical vm2 Flaw Lets Attackers Bypass Sandbox and Execute Arbitrary Code in Node.js

Gbhackers •Divya • January 27, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical vm2 Vulnerability in Node.js Allows Code Execution A critical vulnerability in the vm2 sandboxing library for Node.js has been identified, enabling attackers to escape the sandbox and execute arbitrary code on affected systems. This flaw poses a significant risk to applications utilizing the vm2 library, which is widely used for running untrusted code securely. 13 sources 45

Critical vm2 Flaw Lets Attackers Bypass Sandbox and Execute Arbitrary Code in Node.js

The full story

Extracted Entities

Tools (1)

Vulnerabilities (1)