VM2 Sandbox Escape Allows Arbitrary Code Execution

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.10.5.

Casky was already ahead

This CVE exploits attack patterns that Casky's 301matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

VM2 is a widely-used sandbox for executing untrusted Node.js code in isolated environments. CVE-2026-24120 reveals that the previous patch for CVE-2023-37466 was incomplete, leaving a critical sandbox escape vulnerability that allows attackers to break out of VM2's isolation and execute arbitrary commands on the host system. This affects any organization using VM2 versions prior to 3.10.5 to run user-supplied code, including cloud platforms, code execution services, and development tools. With a CVSS score of 9.8, this represents a critical risk where a single malicious script can fully compromise the underlying host.

Casky's 301 mapped skills help practitioners detect the attack patterns underlying this vulnerability by correlating CWE-94 (Improper Control of Generation of Code) and CWE-693 (Protection Mechanism Failure) indicators across TA0001 (Initial Access) and TA0043 (Reconnaissance) attack chains. Security teams would see findings flagged on resource abuse patterns, unusual process spawning from Node.js runtimes, and code injection attempts that indicate sandbox escape attempts. Claude's extended reasoning capabilities enable Casky to identify the subtle behavioral differences between legitimate VM2 execution and exploited instances—such as unexpected system calls, host filesystem access from sandboxed contexts, or privilege escalation indicators that traditional signatures miss. By monitoring these patterns, practitioners can detect active exploitation attempts and immediately identify systems running vulnerable VM2 versions before attackers establish persistence.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

301 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-24120.

analyzing-apt-group-with-mitre-navigator

threat intelligence · low

Run

analyzing-campaign-attribution-evidence

threat intelligence · low

Run

analyzing-certificate-transparency-for-phishing

threat intelligence · low

Run

MITRE ATT&CK Techniques

TA0001 TA0043

Investigate the attack patterns behind CVE-2026-24120

Casky has 301 skills that investigate the attack patterns behind CVE-2026-24120. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn