vm2 through 3.12.0 (VM/NodeVM) allows sandbox escapes via lib/bridge.js this receiver handling in apply, host Promise rejection sanitization bypass using Symbol.species, and a NodeVM DANGEROUS_BUILTINS denylist omission of child_process when builtin:[‘*’]. Untrusted code can reach process and run commands. Upgrade to 3.12.1 and avoid exposing non-strict host fns/host Promises.

CVE IDs: CVE-2026-93603, CVE-2026-93606, CVE-2026-93605