Critical vm2 Node.js Flaw allows Sandbox Escape and Arbitrary Code Execution.

A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js library that, if successfully exploited, could allow attackers to run arbitrary code on the underlying operating system.

⁉️The vulnerability, tracked as CVE-2026-22709, carries a CVSS score of 9.8 out of 10.0 on the CVSS scoring system.⁉️

https://www.endorlabs.com/learn/cve-2026-22709-critical-sandbox-escape-in-vm2-enables-arbitrary-code-execution

#vm2 #nodejs #sandbox #escape #arbitrary #code #execution #it #security #privacy #engineer #media #secure #javascript #programming #developer #tech #news

Critical sandbox escape flaw discovered in popular vm2 NodeJS library

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary code on the underlying host system.

BleepingComputer

The #Sega #Dreamcast #VMUPro just went live for pre-orders on #8BitMods website.

I secured a smoke black one.

It ships in October and with 8 day Royal Mail came to $97.00 here in the states.

This thing seems so cool and its features appeal to me more than the #VM2 that was released by Dreamware.

#Gaming #VideoGames #RetroGaming

Finally got around to swapping the buttons on my VM2 with the ones from my original SEGA VMU. They really feel so much nicer, and I prefer the color of the original buttons too.

#SEGA #Dreamcast #RetroGaming #VMU #VM2 #SkiesOfArcadia #PintasQuest #Gaming

Lets Goooooooooooo!

Almost a year and a half ago (!!!!) I ordered the #VM2, a next generation #VMU for the #Sega #Dreamcast!

The device, made by Dreamware Enterprises, has finally made its way to my doorstep!

Unfortunately this afternoon is completely booked. 😔

Hopefully I'll get some time to tinker around with it later tonight.

#Gaming #VideoGames #Games #RetroGaming #RetroGames

Chao Adventure is a lot more fun when you don't have to worry about replacing the batteries

#SEGA #Dreamcast #RetroGaming #gaming #Dreamware #VM2 #SonicAdventure #ChaoAdventure

@SuperSelena64 Been waiting on the #VM2 for so long...

I should be included in the next shipment or two. I can't wait!

The wait is agonizing!

Another batch of the #VM2 have shipped out.

I was really hoping that I would have mine by Christmas but at this rate it like it will be February or March.

My order number is 17xx and other than the first shipment they are steadily shipping only 200-ish a month.

The anticipation is brutal but I just need to be patient. Mine will ship eventually.

#VMU #Sega #Dreamcast #RetroGaming #VideoGames

The VM2 has begun to ship!!!

Orders 1 - 461 are currently shipping. I'm 1,7XX...

They are continuously shipping through the month. Hopefully I will have mine in the next few weeks.

#Sega #Dreamcast #SegaDreamcast #VM2 #Gaming #VideoGames #Games #RetroGaming #RetroGames

🚨​ [#PatchNow] New VM2 #SandboxEscape... Two critical vulns are out in the #VM2 #Sandbox Library. These flaws affect all versions prior to 3.9.17 and both carry a CVSS score of 9.8.

If exploited, a threat actor could escape protection boundaries and execute arbitrary code. A patch has been released. so get it and update: https://www.bleepingcomputer.com/news/security/new-sandbox-escape-poc-exploit-available-for-vm2-library-patch-now.

These two CVEs (CVE-2023-29199 and CVE-2023-30547) were discovered by Seung Hyun Lee.

https://nvd.nist.gov/vuln/detail/CVE-2023-29199

https://nvd.nist.gov/vuln/detail/CVE-2023-30547

#infosec #patchmanagement #riskmitigation

New sandbox escape PoC exploit available for VM2 library, patch now

Security researchers have released yet another sandbox escape proof of concept (PoC) exploit that makes it possible to execute unsafe code on the host running the VM2 sandbox.

BleepingComputer