CVE-2026-106071

CVE-2026-106071 published: A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule. When the requested path is shorter than the prefix of a wildcard grant, the radix tree lookup sto...

View full NVD advisory → ← Back to CVE watch