vm2 is an open‑source sandbox library for Node.js. Prior to version 3.11.2 its neutralizeArraySpeciesBatch method can intercept objects from the host environment through array prototype getters and re‑introduce them into the sandbox. This defect allows code that runs inside the sandbox to acquire host Function objects and other host‑side objects, thereby escaping the isolated environment and executing arbitrary commands on the host. The vulnerability is represented by CWE‑1100 and CWE‑668 and results in a complete compromise of the Node.js process.

The patriksimek:vm2 package is vulnerable when any installation older than 3.11.2 is used. All released versions before 3.11.2 contain the susceptible neutralizeArraySpeciesBatch implementation and therefore are affected.

The CVSS score of 9.8 signals a critical level of risk. The EPSS score of < 1 % indicates that, as of the time of this analysis, exploitation is unlikely to be widespread, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, the flaw permits a sandbox‑escaping attack if an attacker can first execute code inside the vm2 runtime. The attack vector is inferred from the description as requiring sandbox code execution; the data does not provide an explicit vector, so the scenario is deduced.