{"id":"EUVD-2026-36440","enisaUuid":"904eda68-0197-3aa2-87a1-b7b95de4bf41","description":"vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target object. Per the Proxy set trap specification, when receiver !\u003d\u003d proxy (e.g., when a child object inherits from the proxy via Object.create), the property assignment should create an own property on the receiver, not on the proxy target. The current implementation always calls otherReflectSet(object, key, value) against the host target, causing all inherited property writes to leak through to the host object. This bug provides an alternative attack vector for writing dangerous cross-realm Symbol keys (e.g., nodejs.util.promisify.custom) to host objects, bypassing any future per-trap isDangerousCrossRealmSymbol guard on the direct set path. This issue has been patched in version 3.11.4.","datePublished":"Jun 12, 2026, 2:14:06 PM","dateUpdated":"Jun 12, 2026, 3:03:57 PM","baseScore":8.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-c4cf-2hgv-2qv6\nhttps://github.com/patriksimek/vm2/commit/26d0318b5e6555be4b187ba05d6cf378ccecfe22\nhttps://github.com/patriksimek/vm2/releases/tag/v3.11.4\n","aliases":"CVE-2026-47209\nGHSA-c4cf-2hgv-2qv6\n","assigner":"GitHub_M","epss":0.29,"enisaIdProduct":[{"id":"e0308c64-1d51-3129-ac0c-262b942c3332","product":{"name":"vm2","vendor":{"name":"patriksimek"}},"product_version":"\u003c 3.11.4"}],"enisaIdVendor":[{"id":"aa8bf309-7753-3ac6-955c-876b1070de93","vendor":{"name":"patriksimek"}}],"enisaIdVulnerability":[{"id":"b56354f4-4ab6-395b-8105-579bd140c7b6","vulnerability":{"id":"CVE-2026-47209","description":"vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) ignores the receiver parameter and unconditionally writes to the host target object. Per the Proxy set trap specification, when receiver !\u003d\u003d proxy (e.g., when a child object inherits from the proxy via Object.create), the property assignment should create an own property on the receiver, not on the proxy target. The current implementation always calls otherReflectSet(object, key, value) against the host target, causing all inherited property writes to leak through to the host object. This bug provides an alternative attack vector for writing dangerous cross-realm Symbol keys (e.g., nodejs.util.promisify.custom) to host objects, bypassing any future per-trap isDangerousCrossRealmSymbol guard on the direct set path. This issue has been patched in version 3.11.4.","datePublished":"Jun 12, 2026, 2:14:06 PM","dateUpdated":"Jun 12, 2026, 3:03:57 PM","status":"PUBLISHED","baseScore":8.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-c4cf-2hgv-2qv6\nhttps://github.com/patriksimek/vm2/commit/26d0318b5e6555be4b187ba05d6cf378ccecfe22\nhttps://github.com/patriksimek/vm2/releases/tag/v3.11.4\n","enisa_id":"EUVD-2026-36440\n","assigner":"GitHub_M","epss":0.29,"dataProcessed":"Nov 3, 2026, 7:18:19 AM","vulnerabilityProduct":[{"id":"8a5f8def-4bd2-3bfb-b6dd-19670adea70d","product":{"name":"vm2","vendor":{"name":"patriksimek"}},"product_version":"\u003c 3.11.4"}],"vulnerabilityVendor":[{"id":"9547c9f2-e8da-3ab6-85c5-681283fec009","vendor":{"name":"patriksimek"}}]}},{"id":"ecb22f90-2fba-3fa5-a85d-6a847f7fa8fc","vulnerability":{"id":"GHSA-c4cf-2hgv-2qv6","description":"vm2\u0027s Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain","datePublished":"May 29, 2026, 5:49:18 PM","dateUpdated":"Jun 12, 2026, 7:30:05 PM","baseScore":0.0,"references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-c4cf-2hgv-2qv6\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-47209\nhttps://github.com/patriksimek/vm2/commit/26d0318b5e6555be4b187ba05d6cf378ccecfe22\nhttps://github.com/patriksimek/vm2\nhttps://github.com/patriksimek/vm2/releases/tag/v3.11.4\n","enisa_id":"EUVD-2026-36440\n","aliases":"GHSA-c4cf-2hgv-2qv6\nCVE-2026-47209\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:03 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"74666bba-be4f-3a47-9300-fc48cb58132a","advisory":{"id":"RHSA-2026:33574","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.9.6 release.","summary":"Red Hat Developer Hub 1.9.6 has been released.","datePublished":"Jun 30, 2026, 3:00:33 PM","dateUpdated":"Oct 31, 2026, 6:06:26 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:33574\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33574.json\n","aliases":"CVE-2026-9277\nCVE-2026-9673\nCVE-2026-27145\nCVE-2026-33811\nCVE-2026-39820\nCVE-2026-42033\nCVE-2026-42035\nCVE-2026-42039\nCVE-2026-42041\nCVE-2026-42043\nCVE-2026-42044\nCVE-2026-42338\nCVE-2026-42499\nCVE-2026-44486\nCVE-2026-44487\nCVE-2026-44488\nCVE-2026-44492\nCVE-2026-44494\nCVE-2026-44495\nCVE-2026-44496\nCVE-2026-44724\nCVE-2026-45736\nCVE-2026-47131\nCVE-2026-47135\nCVE-2026-47137\nCVE-2026-47139\nCVE-2026-47140\nCVE-2026-47141\nCVE-2026-47208\nCVE-2026-47209\nCVE-2026-48779\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"03ade702-cbc9-3024-82bf-dc2a0a643224","product":{"name":"Red Hat Developer Hub 1.9","vendor":{"name":"Red Hat"}}},{"id":"3ad32e41-b743-33de-abd5-28532eb1db8f","product":{"name":"registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:219babfcc89ae903edf35022aae79ba1d1b326386978db8ff267e24e50f9a785_amd64","vendor":{"name":"Red Hat"}}},{"id":"ba26e3ee-b0ea-3abf-9c2c-c4679bafb270","product":{"name":"registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:044d2d72c21329826c144d9b55c381576a421188139de0fed693e74997665d2c_amd64","vendor":{"name":"Red Hat"}}},{"id":"e87b9f6c-6992-3b1a-9d17-64e2bf043a42","product":{"name":"registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:66fb23e8dbced7bb187928fb38562ae9e2649265d56f745044dd5e79b4209893_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"e6dcd86f-04f0-3a8e-9976-82bc79b2452e","advisory":{"id":"RHSA-2026:50850","description":"Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.1 security update","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.","datePublished":"Aug 5, 2026, 4:35:19 PM","dateUpdated":"Oct 31, 2026, 3:41:27 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:50850\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50850.json\n","aliases":"CVE-2026-9277\nCVE-2026-43997\nCVE-2026-43998\nCVE-2026-43999\nCVE-2026-44000\nCVE-2026-44001\nCVE-2026-44002\nCVE-2026-44003\nCVE-2026-44004\nCVE-2026-44005\nCVE-2026-44006\nCVE-2026-44007\nCVE-2026-44008\nCVE-2026-44009\nCVE-2026-45411\nCVE-2026-47131\nCVE-2026-47135\nCVE-2026-47137\nCVE-2026-47139\nCVE-2026-47140\nCVE-2026-47141\nCVE-2026-47209\nCVE-2026-48068\nCVE-2026-48801\nCVE-2026-59877\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"311ecff8-8324-3291-b7f2-d8b3178ab547","product":{"name":"registry.redhat.io/ansible-automation-platform/automation-portal@sha256:a85a548cb563a32be76c6e7e015fd57d340e068e321bf34b060d9eb901c33c4d_amd64","vendor":{"name":"Red Hat"}}},{"id":"31e60952-0a9a-3915-aadb-28544aea82d4","product":{"name":"Red Hat Ansible Automation Platform 2.1","vendor":{"name":"Red Hat"}}},{"id":"860f696f-a4de-3063-8cce-cf79cc54207b","product":{"name":"Self-service automation portal 2.1","vendor":{"name":"Red Hat"}}}]}}]}