CVE-2026-44005

Description

vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writes into the underlying host objects with otherReflectSet() and otherReflectDefineProperty(), which lets attacker-controlled JavaScript running in a default VM or inherited NodeVM mutate shared host Object.prototype, Array.prototype, and Function.prototype from inside the sandbox This vulnerability is fixed in 3.11.0.

Overview

State: PUBLISHED
Assigner (CNA): GitHub_M
CVSS severity: CRITICAL
CVSS score: 10.0 / 10
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
Effective score: 10.0 / 10 CRITICAL source: CNA overview
CWE(s): CWE-1321, CWE-94
Reserved: 2026-05-04
Published: 2026-05-13 19:40 UTC
Last updated: 2026-05-15 11:58 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/44xxx/CVE-2026-44005.json
Linked Threat: CVE-2026-44005 — vm2: Sandbox escape

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-13 18:16:17 UTC
NVD last modified: 2026-05-14 16:16:23 UTC
NVD CVSS v3.1: 10.0 / 10 CRITICAL source: security-advisories@github.com
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
Exploitability subscore: 3.9 / 10
Impact subscore: 5.8 / 10
EPSS score: 0.0011 (probability of exploitation in next 30 days)
EPSS percentile: 28.53% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-30075
Assigner: GitHub_M
Published: May 13, 2026, 5:40:41 PM
Updated: May 15, 2026, 9:58:06 AM
EUVD base score (CVSS 3.1): 10.0 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
EUVD-reported EPSS: 0.1100
Vendors: patriksimek
Products: vm2 (3.9.6, < 3.11.0)
Aliases: GHSA-vwrp-x96c-mhwq

ENISA description: vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writes into the underlying host objects with otherReflectSet() and otherReflectDefineProperty(), which lets attacker-controlled JavaScript running in a default VM or inherited NodeVM mutate shared host Object.prototype, Array.prototype, and Function.prototype from inside the sandbox This vulnerability is fixed in 3.11.0.

EUVD references (1)

https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq

Affected products (1)

Vendor	Product	Versions	Platforms
patriksimek	vm2	`>= 3.9.6, < 3.11.0` (affected)	—

Affected products — CPE 2.3 (1) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:a:vm2_project:vm2:*:*:*:*:*:node.js:*:*

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq x_refsource_CONFIRM

MITRE references (1) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq x_refsource_CONFIRM

Web references (4)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

https://nvd.nist.gov/vuln/detail/CVE-2026-44005 tenable:nvd.nist.gov
https://thehackernews.com/2026/05/vm2-nodejs-library-vulnerabilities.html tenable:thehackernews.com
https://www.cve.org/CVERecord?id=CVE-2026-44005 tenable:www.cve.org
https://www.first.org/epss/ tenable:www.first.org

NVD-tagged references (2)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq security-advisories@github.com ExploitVendor Advisory
https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq 134c704f-9b21-4f2e-91b3-4a467353bcc0 ExploitVendor Advisory

Indicators (4)

IOCs linked to the auto-promoted Threat row.

Type	Value	VirusTotal	Attached
domain	`object.prototype`	no local data	2026-05-18 21:18 UTC
domain	`node.js`	no local data	2026-05-18 21:18 UTC
domain	`array.prototype`	no local data	2026-05-18 21:18 UTC
domain	`function.prototype`	no local data	2026-05-18 21:18 UTC

Remediations (17)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Rufus 4.6 gets Windows 11 24H2 unsupported PC bypass, ReactOS boot fix

web:www.neowin.net

Rufus final version 4.6 has been released which brings Windows 11 24H2 in-place upgrade bypass fix , and more improvements.

2026-05-22 17:21 UTC
Microsoft mitigates YellowKey BitLocker bypass, no patch yet

web:www.notebookcheck.net

Microsoft released mitigation steps for YellowKey ( CVE - 2026 -45585), a BitLocker bypass that grants physical attackers access to encrypted Windows drives.

2026-05-22 17:21 UTC
CVE-2026-44005 - scout.docker.com

web:scout.docker.com

View details on CVE-2026-44005 , including its impact, common weakness enumeration, severity scores, and more from a library of trusted sources.

2026-05-22 17:21 UTC
May 2026 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft has released security updates for 130 vulnerabilities, including 30 critical, in its May 2026 Patch Tuesday rollout.

2026-05-22 17:21 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-22 17:21 UTC
Patch Tuesday May 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-05-22 17:21 UTC
Microsoft Patch Tuesday, May 2026 Security Update Review

web:threatprotect.qualys.com

May 2026's Patch Tuesday arrives with Microsoft addressing a fresh set of vulnerabilities across its ecosystem, reinforcing the ongoing need for timely patching in an increasingly threat-heavy landscape. Here's a quick breakdown of what you need to know.

2026-05-22 17:21 UTC
Microsoft Rolls Out Mitigations for 'YellowKey' BitLocker ...

web:www.securityweek.com

Microsoft has announced mitigations for CVE - 2026 -45585, a BitLocker bypass triggered via FsTx in Windows Recovery.

2026-05-22 04:06 UTC
VirusTotal - Home

web:www.virustotal.com

VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

2026-05-22 04:06 UTC
Microsoft Update Catalog

web:catalog.update.microsoft.com

© 2026 Microsoft Corporation. All Rights Reserved. | privacy | Consumer Health Privacy | terms of use | help | Accessibilité

2026-05-22 04:06 UTC
CVE-2026-44005 - Security Alert | The Fastest Security Intelligence Feed

web:zerodaysignal.com

Recommended Actions 1.Inventory affected systems running vm2>= 3.9.6, < 3.11.0 2.Review patch availability from patriksimek 3.Implement temporary mitigations if patches unavailable 4.Update incident response procedures 🔔 Get Alerted on patriksimek CVEs

2026-05-22 04:06 UTC
Microsoft Releases Mitigation for Windows BitLocker Security Bypass 0 ...

web:cybersecuritynews.com

No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.

2026-05-22 04:06 UTC
Microsoft May 2026 security updates - securereading.com

web:securereading.com

Microsoft has released its May 2026 Patch Tuesday security updates addressing multiple critical vulnerabilities affecting enterprise cloud services, operating systems, virtualization infrastructure, authentication platforms, and business applications.

2026-05-22 04:06 UTC
Google Translate

web:translate.google.com

Google's service, offered free of charge, instantly translates words, phrases, and web pages between English and over 100 other languages.

2026-05-22 04:06 UTC
2 New Microsoft Defender Zero-Days Exploited—Patch Now ... - Forbes

web:www.forbes.com

Microsoft has confirmed an emergency security update as CISA warns that two new Defender zero-days are being exploited by attackers.

2026-05-22 04:06 UTC
Microsoft provides mitigation for "YellowKey" BitLocker bypass flaw ...

web:www.helpnetsecurity.com

Microsoft is working on a fix for CVE - 2026 -45585 (aka "Yellowkey"), a vulnerability that can be used to bypass Windows' BitLocker protection.

2026-05-22 04:06 UTC
Vulnerability Remediation vs. Mitigation: What are the Differences ...

web:www.secure.com

Learn the difference between vulnerability remediation and mitigation , and how a risk-based strategy can strengthen your security posture.

2026-05-22 04:06 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-44005.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44005",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T03:56:03.570732Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T09:58:06.914Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "vm2",
          "vendor": "patriksimek",
          "versions": [
            {
              "status": "affected",
              "version": ">= 3.9.6, < 3.11.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "vm2 is an open source vm/sandbox for Node.js. From 3.9.6 to 3.10.5, vm2's bridge exposes mutable proxies for real host-realm intrinsic prototypes and then forwards sandbox writes into the underlying host objects with otherReflectSet() and otherReflectDefineProperty(), which lets attacker-controlled JavaScript running in a default VM or inherited NodeVM mutate shared host Object.prototype, Array.prototype, and Function.prototype from inside the sandbox This vulnerability is fixed in 3.11.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1321",
              "description": "CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T17:40:41.578Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq"
        }
      ],
      "source": {
        "advisory": "GHSA-vwrp-x96c-mhwq",
        "discovery": "UNKNOWN"
      },
      "title": "vm2: Sandbox escape"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-44005",
    "datePublished": "2026-05-13T17:40:41.578Z",
    "dateReserved": "2026-05-04T21:24:36.505Z",
    "dateUpdated": "2026-05-15T09:58:06.914Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}