A vulnerability classified as critical was found in vm2 up to 3.11.0. This vulnerability affects unknown code. Such manipulation leads to os command injection.
This vulnerability is listed as CVE-2026-44007. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is advised.
