[*] Package base: /pruva/project-cache/vm2-pkgs
[*] vm2@3.12.0 tarball sha256: 263d59bfcdd5107915551b4181228fb5c8dd98f043faa78f2b8fb33f8fe8ffa8
[*] vm2@3.12.1 tarball sha256: afa9d765ff89edcd8472ef2fb3e1707d2e9077aeffe8ea861fd46aa696726513
[VM:vulnerable-1] sandbox returned: {"isProxy":true,"envSecret":"CANARY123","exec":"PWNED_FROM_SANDBOX","markerWritten":true}
[VM:vulnerable-1] ESCAPE_CONFIRMED
[*] vulnerable VM attempt 1: exit=0 escaped=1
[+] vulnerable (VM #1): escape confirmed
[NodeVM:vulnerable-1] sandbox returned: {"isProxy":true,"envSecret":"CANARY123","exec":"PWNED_FROM_SANDBOX","markerWritten":true}
[NodeVM:vulnerable-1] ESCAPE_CONFIRMED
[*] vulnerable NodeVM attempt 1: exit=0 escaped=1
[+] vulnerable (NodeVM #1): escape confirmed
[VM:vulnerable-2] sandbox returned: {"isProxy":true,"envSecret":"CANARY123","exec":"PWNED_FROM_SANDBOX","markerWritten":true}
[VM:vulnerable-2] ESCAPE_CONFIRMED
[*] vulnerable VM attempt 2: exit=0 escaped=1
[+] vulnerable (VM #2): escape confirmed
[NodeVM:vulnerable-2] sandbox returned: {"isProxy":true,"envSecret":"CANARY123","exec":"PWNED_FROM_SANDBOX","markerWritten":true}
[NodeVM:vulnerable-2] ESCAPE_CONFIRMED
[*] vulnerable NodeVM attempt 2: exit=0 escaped=1
[+] vulnerable (NodeVM #2): escape confirmed
[VM:fixed-1] sandbox returned: UNSET
[VM:fixed-1] ESCAPE_NOT_CONFIRMED
[*] fixed VM attempt 1: exit=1 escaped=0
[+] fixed (VM #1): blocked as expected
[NodeVM:fixed-1] sandbox returned: UNSET
[NodeVM:fixed-1] ESCAPE_NOT_CONFIRMED
[*] fixed NodeVM attempt 1: exit=1 escaped=0
[+] fixed (NodeVM #1): blocked as expected
[VM:fixed-2] sandbox returned: UNSET
[VM:fixed-2] ESCAPE_NOT_CONFIRMED
[*] fixed VM attempt 2: exit=1 escaped=0
[+] fixed (VM #2): blocked as expected
[NodeVM:fixed-2] sandbox returned: UNSET
[NodeVM:fixed-2] ESCAPE_NOT_CONFIRMED
[*] fixed NodeVM attempt 2: exit=1 escaped=0
[+] fixed (NodeVM #2): blocked as expected
[*] wrote runtime_manifest.json
==================================================
[+] CVE-2026-93606 CONFIRMED: sandbox escape on vm2@3.12.0 (VM and NodeVM), blocked on vm2@3.12.1