Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-56847

Опубликовано: 30 июл. 2026
Источник: nvd
CVSS3: 3.3
EPSS Низкий

Описание

A flaw in Node.js Permission Model enforcement allows trace_events.createTracing().enable() Writes Trace Logs Outside --allow-fs-write.

This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.

This vulnerability affects Node.js 22.x, 24.x, and 26.x.

EPSS

Процентиль: 5%
0.00158
Низкий

3.3 Low

CVSS3

Дефекты

CWE-1119

Связанные уязвимости

CVSS3: 3.3
ubuntu
8 дней назад

A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

CVSS3: 3.3
debian
8 дней назад

A flaw in Node.js Permission Model enforcement allows `trace_events.cr ...

CVSS3: 3.3
github
8 дней назад

A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

EPSS

Процентиль: 5%
0.00158
Низкий

3.3 Low

CVSS3

Дефекты

CWE-1119