CVE-2026-25533: Sandbox Escape in enclave-vm via Infinite Recursion and Error Objects
Summary
CVE-2026-25533: Sandbox escape via infinite recursion and error objects. Affects enclave-vm versions < 2.7.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The enclave-vm package is designed to provide a secure environment for executing untrusted code in Node.js applications. It implements various security measures to isolate the execution context, preventing unauthorized access to the host environment. However, recent findings have revealed that the security layers in enclave-vm are insufficient, allowing for potential sandbox escape vulnerabilities.
Vulnerability Detail
The vulnerability arises from a bug in Node.js that causes the vm module to leak host references during infinite recursion. This flaw can be exploited by attackers to bypass the security mechanisms of enclave-vm, allowing them to execute arbitrary code outside the sandbox. The issue is exacerbated by the inadequate hardening of error objects and the ability to access host objects through dynamic property accesses.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, avoid using the enclave-vm package versions prior to 2.10.1. Additionally, ensure that your application does not allow untrusted code execution that could lead to infinite recursion scenarios.
Conclusion
The CVE-2026-25533 vulnerability in the enclave-vm package poses a significant risk due to its potential for sandbox escape. Users are strongly encouraged to update to the patched version to protect their applications from exploitation. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for enclave-vm →
FAQ
enclave-vm is an npm package that provides a secure environment for executing untrusted code in Node.js applications, isolating the execution context to prevent unauthorized access.
CVE-2026-25533 refers to a critical vulnerability in the enclave-vm package that allows attackers to escape the sandbox through infinite recursion and error object manipulation.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerability can lead to sandbox escape, allowing attackers to execute arbitrary code on the host system, which could result in data breaches or system compromise.
Yes, the vulnerability has been patched in enclave-vm version 2.10.1. Users are advised to update to this version or later to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for enclave-vm.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
