Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-rm74-p6v5-wkbj
Vulnerability ID VCID-rm74-p6v5-wkbj
Aliases CVE-2023-29199
GHSA-xj72-wvfv-8985
Summary There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass `handleException()` and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context. A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox. This vulnerability was patched in the release of version `3.9.16` of `vm2`.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-913 Improper Control of Dynamically-Managed Code Resources
CWE-755 Improper Handling of Exceptional Conditions
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 9.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29199.json
epss 0.18512 https://api.first.org/data/v1/epss?cve=CVE-2023-29199
epss 0.18512 https://api.first.org/data/v1/epss?cve=CVE-2023-29199
epss 0.24972 https://api.first.org/data/v1/epss?cve=CVE-2023-29199
epss 0.24972 https://api.first.org/data/v1/epss?cve=CVE-2023-29199
cvssv3.1 9.8 https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c
generic_textual CRITICAL https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c
ssvc Track https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-xj72-wvfv-8985
cvssv3.1 9.8 https://github.com/patriksimek/vm2
generic_textual CRITICAL https://github.com/patriksimek/vm2
cvssv3.1 9.8 https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7
generic_textual CRITICAL https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7
ssvc Track https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7
cvssv3.1 9.8 https://github.com/patriksimek/vm2/issues/516
generic_textual CRITICAL https://github.com/patriksimek/vm2/issues/516
ssvc Track https://github.com/patriksimek/vm2/issues/516
cvssv3.1 9.8 https://github.com/patriksimek/vm2/releases/tag/3.9.16
generic_textual CRITICAL https://github.com/patriksimek/vm2/releases/tag/3.9.16
ssvc Track https://github.com/patriksimek/vm2/releases/tag/3.9.16
cvssv3.1 9.8 https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985
cvssv3.1_qr CRITICAL https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985
generic_textual CRITICAL https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985
ssvc Track https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985
cvssv3.1 9.8 https://nvd.nist.gov/vuln/detail/CVE-2023-29199
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2023-29199
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29199.json
https://api.first.org/data/v1/epss?cve=CVE-2023-29199
https://github.com/patriksimek/vm2
https://nvd.nist.gov/vuln/detail/CVE-2023-29199
2187409 https://bugzilla.redhat.com/show_bug.cgi?id=2187409
24c724daa7c09f003e556d7cd1c7a8381cb985d7 https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7
3.9.16 https://github.com/patriksimek/vm2/releases/tag/3.9.16
516 https://github.com/patriksimek/vm2/issues/516
f05730165799bf56d70391f3d9ea187c https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c
GHSA-xj72-wvfv-8985 https://github.com/advisories/GHSA-xj72-wvfv-8985
GHSA-xj72-wvfv-8985 https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29199.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-06T18:44:31Z/ Found at https://gist.github.com/leesh3288/f05730165799bf56d70391f3d9ea187c
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/patriksimek/vm2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-06T18:44:31Z/ Found at https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/patriksimek/vm2/issues/516
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-06T18:44:31Z/ Found at https://github.com/patriksimek/vm2/issues/516
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/patriksimek/vm2/releases/tag/3.9.16
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-06T18:44:31Z/ Found at https://github.com/patriksimek/vm2/releases/tag/3.9.16
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-06T18:44:31Z/ Found at https://github.com/patriksimek/vm2/security/advisories/GHSA-xj72-wvfv-8985
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-29199
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.95415
EPSS Score 0.18512
Published At June 13, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:25:27.781359+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/29xxx/CVE-2023-29199.json 38.6.0