CVE ID: CVE-2026-48936
Published: June 26, 2026
Description: A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.
Severity: 0.0 | NA
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-48936
CVE-2026-48936 - Node.js: Insufficient Permissions Check Leading to Unauthorized Socket Server Creation
-
Starburst-David
- Posts: 289
- Joined: Wed Feb 11, 2026 8:31 pm