CVE-2026-92955 | patriksimek vm2 up to 3.11.7 NodeVM EventEmitter.prototype.emit sandbox

September 17, 2026 Yanac

A vulnerability has been found in patriksimek vm2 up to 3.11.7 and classified as critical. Affected by this issue is the function EventEmitter.prototype.emit of the component NodeVM. The manipulation leads to sandbox issue.

This vulnerability is documented as CVE-2026-92955. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More