Post
OffSequence
offseq.bsky.social
did:plc:t5t6qep2vfipbi7f54demwev
vm2 <3.12.2 suffers a CRITICAL authorization bypass in NodeVM external-module resolver. Sandbox escape & code execution risk. Upgrade to 3.12.2+ immediately. https://radar.offseq.com/threat/vm2-before-3122-contains-an-authorization-bypass-in-the-nodevm-external-module-resolver-cve-2026-100721-5c7...
https://radar.offseq.com/threat/vm2-before-3122-contains-an-authorization-bypass-in-the-nodevm-external-module-resolver-cve-2026-100721-5c70167d00dbbf82
2026-09-27T06:00:25.859Z