AIKIDO-2026-351495

vm2 is vulnerable to Improper Access Control

Improper Access ControlGHSA-jf8q-945g-9q4c Published Yesterday

Medium Risk

This Affects:

vm2

3.11.4 - 3.11.6

Fixed in 3.11.7

Are you affected? Scan for Free

TL;DR

The sandbox's dangerous-symbol filters use a fixed list that omits the registered symbols nodejs.stream.disturbed and nodejs.stream.errored. Sandboxed code extracts these real host symbols and writes them onto host objects, corrupting host-visible WebStream state. Consumed streams then appear undisturbed and error states are hidden from host checks, bypassing one-shot consumption and error handling. The fix validates symbols by namespace so all nodejs.-prefixed registered symbols are rejected.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and your application relies on host WebStream state checks for objects reachable from the sandbox.