A critical sandbox escape vulnerability in the patriksimek vm2 library allows attackers to bypass security policies and achieve arbitrary code execution on the host system.

This is an improper privilege management flaw (CWE-269) where NodeVM fails to normalize node-prefixed specifiers in deny-list policies. An authenticated user within the sandbox can leverage this flaw to access restricted host modules like child_process, effectively granting them full host command execution capabilities.

The ability for sandboxed code to escape its environment and execute commands on the host poses a catastrophic risk to data integrity and system availability. Given the CVSS score of 9.9, this vulnerability represents an near-total compromise of the hosting infrastructure, potentially leading to unauthorized data access, lateral movement, or complete system takeover.

Immediate Action: Upgrade the patriksimek vm2 library to version 3.11.7 or later to implement the required normalization logic for builtin specifiers.

Proactive Monitoring: Inspect application logs for attempts to instantiate NodeVM with suspicious require policies or calls to unauthorized child process modules within sandboxed environments.

Compensating Controls: If patching is delayed, isolate sandboxed processes within a secondary container or virtual machine with restricted system call privileges to limit the impact of a potential escape.

Public Exploit Available: Unknown.

This vulnerability is critical and demands immediate attention due to its potential for full host system compromise. Security teams should prioritize the update to vm2 version 3.11.7 across all development and production environments to neutralize the sandbox escape path and restore the integrity of the isolation boundary.