OpenSSL engines can be used to bypass and/or disable the permission model #1954535 Valid Access Control – 2023-06-22 – 4 Permission Model bypass via FileHandle.utimes() in the promises API #3625987 Valid Access Control Low 2026-06-25 – 4 Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings #3656716 Valid Access Control Medium 2026-06-25 – 4 DNS rebinding in --inspect (insufficient fix of CVE-2018-7160) #1069487 Valid Access Control – 2021-02-23 $500 5 fs module's file watching is not restricted by --allow-fs-read #1966499 Valid Access Control – 2023-07-20 – 5 Process-based permissions can be bypassed with the "inspector" module. #1962701 Valid Access Control – 2023-07-20 – 6 fs.openAsBlob() bypasses permission system #1966492 Valid Access Control – 2023-07-20 – 6 Permission Model filesystem over-grant via wildcard radix lookup #3996423 Valid Access Control Low 2026-10-27 – 6 Permissions policies can be bypassed via process.mainModule #1747642 Valid Access Control – 2023-03-19 – 7 CVE-2024-36137 Patch Bypass - FileHandle.chmod/chown #3449392 Valid Access Control Low 2026-03-30 – 7 Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching #3656869 Valid Access Control Medium 2026-06-25 – 7 The use of __proto__ in process.mainModule.__proto__.require() bypasses the permission system in Node v19.6.1 #1877919 Valid Access Control – 2023-07-20 – 8 Unix domain socket server bypasses --permission network restrictions (incomplete CVE-2026-21636 fix) #3618831 Valid Access Control Low 2026-06-25 – 8 Node Installer Local Privilege Escalation #1211160 Valid Access Control – 2021-07-01 – 10 Node.js Permission Model bypass: UDS server bind/listen works without `--allow-net` #3559715 Valid Access Control Medium 2026-03-30 – 10 Permission Model bypass with fs.realpathSync #3838675 Valid Access Control Low 2026-10-23 – 15 DNS rebinding in --inspect (insufficient fix of CVE-2022-32212 affecting macOS devices) #1632921 Valid Access Control – 2022-09-28 – 16 Bypass network import restriction via data URL #2092749 Valid Access Control Medium 2024-07-08 – 18 fs.lstat bypasses permission model #2145862 Valid Access Control Low 2024-07-09 – 18 dns.resolve truncates names containing NUL char #4038342 Valid Access Control High 2026-10-23 – 18 Improper handling of wildcards in --allow-fs-read and --allow-fs-write #2257156 Valid Access Control – 2024-02-15 – 20 Permissions can be bypassed via arbitrary code execution through abusing libuv signal pipes #2260337 Informative Access Control – 2024-08-08 – 20 fs.fchown/fchmod bypasses permission model #2472071 Valid Access Control Low 2024-07-09 – 20 Permission Model Bypass: `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write` #3838601 Valid Access Control Low 2026-07-29 – 21 Code injection and privilege escalation through Linux capabilities #2237545 Valid Access Control – 2024-02-15 – 23 setuid() does not drop all privileges due to io_uring #2170226 Valid Access Control – 2024-03-16 – 24 Permission Model Bypass via `process.report.writeReport()` Path Misvalidation #3692858 Valid Access Control Low 2026-06-18 – 29 Permission Model: --allow-fs-read/--allow-fs-write radix-tree prefix-boundary over-grant #3761342 Valid Access Control High 2026-07-29 – 33 fs.futimes() Bypasses Read-Only Permission Model #3390084 Valid Access Control Low 2026-01-15 – 34 Permission model improperly processes UNC paths #2079103 Valid Access Control Low 2024-07-15 – 35 Permission Model bypass: process.report writes (and overwrites) files outside --allow-fs-write paths #3815767 Valid Access Control Low 2026-07-30 – 35 Worker permission bypass via InternalWorker leak in diagnostics #2575105 Valid Access Control High 2025-01-21 – 42 WASI sandbox escape via symlink #2084280 Valid Access Control Medium 2025-05-24 – 44