CVE-2026-106071 | Node.js up to 26.12.0 Permission Model privileges management

October 23, 2026 Yanac

A vulnerability classified as problematic has been found in Node.js up to 26.12.0. Impacted is an unknown function of the component Permission Model. Performing a manipulation results in improper privilege management.

This vulnerability is identified as CVE-2026-106071. The attack is only possible with local access. There is not any exploit available.VulDB Recent EntriesRead More