CVE-2026-22709: vm2 Sandbox Escape Vulnerability

Socradar • January 29, 2026

Share: View original

A recently disclosed critical vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows attackers to escape the sandbox ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical vm2 Vulnerability in Node.js Allows Code Execution A critical vulnerability in the vm2 sandboxing library for Node.js has been identified, enabling attackers to escape the sandbox and execute arbitrary code on affected systems. This flaw poses a significant risk to applications utilizing the vm2 library, which is widely used for running untrusted code securely. 13 sources 45

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Tools (1)

Vulnerabilities (1)

Vm2 Sandbox Escape