CVE-2026-92949CWE-471

CVE-2026-92949

Medium · published September 17, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze() and vm.readonly() protections. Attackers can use Object.getOwnPropertyDescriptor() or __lookupSetter__() to extract and invoke host object setters directly, mutating properties the embedder explicitly marked read-only.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
6.3 · CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00319 · 23.6th percentile
Weakness
CWE-471 · Modification of Assumed-Immutable Data (MAID)
Published
2026-09-17T18:18Z
References (3)
https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff · [email protected]https://www.vulncheck.com/advisories/vm2-3.9.6-before-3.11.7-sandbox-bypass-via-accessor-descriptor · [email protected]https://github.com/patriksimek/vm2/security/advisories/GHSA-633r-hq9m-c4ff · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 13:46Z
    vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor
    cvelistv5