CVE-2023-29199

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass `handleException()` and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context. A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version `3.9.16` of `vm2`.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-913

Affected software

No affected versions have been published.

Timeline

Published
Apr 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-292006.5Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system CVE-2023-292019.0XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, CVE-2023-292029.0XWiki Commons are technical libraries common to several other top level XWiki projects. The RSS macro that is bundled in XWiki included the CVE-2023-292035.3XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally noCVE-2023-292046.1XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measuCVE-2023-292055.4XWiki Commons are technical libraries common to several other top level XWiki projects. The HTML macro does not systematically perform a proCVE-2023-292065.4XWiki Commons are technical libraries common to several other top level XWiki projects. There was no check in the author of a JavaScript xobCVE-2023-292079.0XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't properly sanitizing columCVE-2023-292087.5XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into accounCVE-2023-292098.8XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible docCVE-2023-29218.8The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to CVE-2023-292108.8XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible doc
CVE-2023-29199: Critical severity, CVSS 10.0 | Vulnix