CVE-2026-47208: vm2: Sandbox Breakout Using Promise Species

Synopsis

This is a sandbox escape vulnerability in vm2, a widely used Node.js sandboxing library. The flaw is reachable over the network, requires no authentication, and no victim interaction, based on a CVSS 10.0 vector with network attack surface and no prerequisites. Successful exploitation lets an attacker break out of the vm2 sandbox entirely and execute arbitrary commands directly on the host system. HarborGuard tracks the upstream advisory and will make a patched-image rebuild available as soon as a fix version is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable component is exposed over the network; an attacker can reach it from any internet-adjacent position without requiring LAN or physical access.

• AuthenticationNot required

  No credentials or account of any privilege level are needed to trigger the vulnerability.

• Victim interactionNot required

  The attack is fully automated and does not require any action from a user or operator on the target system.

• Attack complexityDetail

  The exploit is reliable and condition-free; no race conditions, memory-layout dependencies, or environmental factors must be satisfied.

Blast Radius

• Attacker executes arbitrary operating system commands on the host running the vm2 sandbox, achieving full remote code execution outside the sandbox boundary.
• All data readable by the host process is exposed, including environment variables, secrets mounted into the container, and files on the container filesystem.
• An attacker can write or overwrite files and modify application state on the host, tampering with any resource the process has write access to.
• The attacker can terminate the host process or exhaust system resources, causing a complete denial of service for any workload sharing that host.