Skip to content
Sign in
CVE-2026-486171.8LowCWE-284

nodejs node vulnerability

nodejs · node

Not in CISA KEV
0.3%probability of exploitation in the next 30 days
24th percentile
050100

Higher than 24% of scored CVEs

1.8LowCVSS 3.0
Low

DescriptionNVD

A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26.

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 18 Jun.

  1. Node.js fixes critical WebCrypto TLS flaws in urgent update
    SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in