PT-2026-73411 · Bitnami · Node-Min
Published
2026-08-17
·
Updated
2026-08-17
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.
Under
--permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist.This vulnerability affects Node.js main, 22.x, 24.x, and 26.x.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Node-Min