Security News Critical vm2 sandbox bug lets attackers execute code on hosts BleepingComputer Daniel Bender 06 May 2026 Share A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary code on the host system.