CVE-2026-92950: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

The vm2 command-line tool installed by npm install -g vm2 and documented in the README’s “CLI” section runs the supplied script under NodeVM with require:{external:true} and no root / context / builtin configured. With these defaults the resolver loads every relative or absolute require() target through the host require() function, executing the attacker’s module body in the host Node.js process before the result is ever proxied back into the sandbox. A single attacker-controlled file passed to vm2 ./script.js can call require(__filename) to re-execute itself in host realm and reach fs, child_process, etc. The documented sandbox runner is therefore equivalent to node ./script.js. No additional files, flags, or user interaction are required.