vm2 is an open source virtual machine that isolates Node.js code. The vulnerability occurs when the library does not block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mutators. This flaw allows sandboxed code to sever the host intrinsic's prototype chain and reach e.constructor.constructor, which enables arbitrary host command execution.

The vulnerability affects patriksimek:vm2 installations running any version earlier than 3.11.6. The problem was fixed in the 3.11.6 release; all earlier versions are vulnerable.

With a CVSS score of 9.8 the flaw is critical. EPSS data is unavailable and it is not listed in CISA KEV. The exploit requires sandboxed JavaScript that can manipulate function prototypes, and once triggered it grants the attacker the ability to execute arbitrary commands on the host. Immediate patching is advised to mitigate this high-risk attack surface.