AI security incident: OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE...
Summary OneUptime lets project members write custom JavaScript that runs inside monitors. The problem is it executes that code using Node.js's built-in vm module, which Node.js itself documents as "not a security mechanism — do not use it to run untrusted code." The classic one-liner escape gives full access to the underlying process, and since the probe runs with host networking and holds all cluster credentials in its environment, this turns into a full cluster compromise for anyone who can register an account. ### Details The vulnerable code is in Common/Server/Utils/VM/VMRunner.ts at line 55: typescript vm.
Why This Is AI-Related
This page is treated as AI-specific because the source material references copilot, which places the issue inside an AI workflow, model, assistant, or supporting dependency rather than a generic software bulletin.
- copilot
Affected Workflow
Review AI plugins, copilots, model-serving helpers, CLI tools, and automation runtimes that execute system commands.
Likely Attack Path
An attacker can turn the vulnerable AI-adjacent component into a path for command execution on the host or service runtime.
Impact
The issue can create a path to command execution inside an AI-facing product, plugin, copilot, or supporting service runtime. Severity HIGH. Classification confidence 91%. Source channel GHSA.
Detection And Triage Signals
- New shell or process activity from AI-facing services
- Unexpected outbound connections or file writes after prompt or API activity
- Privilege changes, container escapes, or suspicious job execution logs
Recommended Response
- Identify every environment that runs the affected AI plugin, assistant, CLI, or supporting package.
- Patch or isolate the vulnerable component and remove risky execution permissions while validation is in progress.
- Review process execution, outbound connections, and file-write logs for signs of post-exploitation activity.
Compliance And Business Impact
Code execution paths create immediate risk of host compromise, credential theft, and downstream lateral movement.
Sources
Want alerts like this in real time?
Get notified with incident context, likely impact, and response guidance.
Get Notified