Loading vulnerability…
CVE-2026-47140 is a critical sandbox escape vulnerability in the vm2 library for Node.js affecting versions up to and including 3.11.3. The flaw exists in NodeVM’s builtin-module restriction logic in lib/builtin.js, which relied on a denylist of dangerous Node.js builtins but failed to block the process builtin and the inspector/promises subpath. Because filtering used exact-match checks, inspector was denylisted but inspector/promises remained reachable, and process was omitted entirely from the dangerous builtin set. In affected configurations, sandboxed code can require process and use process.getBuiltinModule on Node.js 22 and later to reach host execution primitives such as child_process, or require inspector/promises and use a V8 Inspector Session to invoke Runtime.evaluate outside the sandbox. The result is bypass of the intended builtin restrictions and execution of arbitrary code in the host process.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A critical vm2 sandbox escape vulnerability caused by incomplete denylist coverage and exact-match filtering of dangerous built-in Node.js modules, allowing host-level code execution via process.getBuiltinModule() or inspector/promises.
A critical vm2 NodeVM sandbox escape caused by an incomplete builtin denylist that fails to block process and inspector/promises, enabling remote code execution on the host.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.