CVE-2026-106073 | Node.js prior 22.23.3/24.22.0/26.12.0 Permission Model fs.realpathSync permission

October 23, 2026 Yanac

A vulnerability was found in Node.js and classified as problematic. Affected is the function fs.realpathSync of the component Permission Model. Such manipulation leads to permission issues.

This vulnerability is documented as CVE-2026-106073. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More