CVE-2026-92952 | patriksimek vm2 up to 3.11.6 Symbol Checks lib/setup-sandbox.js stream.Readable.isDisturbed

September 17, 2026 Yanac

A vulnerability categorized as problematic has been discovered in patriksimek vm2 up to 3.11.6. This vulnerability affects the function stream.Readable.isDisturbed of the file lib/setup-sandbox.js of the component Symbol Checks. Such manipulation leads to sandbox issue.

This vulnerability is uniquely identified as CVE-2026-92952. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More