CVE-2026-71269 | Node-RED Storage library.js getLibraryEntry/saveLibraryEntry path path traversal

A vulnerability classified as critical was found in Node-RED. Impacted is the function getLibraryEntry/saveLibraryEntry of the file packages/node_modules/@node-red/runtime/lib/storage/localfilesystem/library.js of the component Storage Module. Such manipulation of the argument path leads to path traversal.

This vulnerability is traded as CVE-2026-71269. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More