CVE-2026-106074 | Node.js up to 22.23.2/24.21.0/26.11.0 Crypto random values

October 23, 2026 Yanac

A vulnerability identified as problematic has been detected in Node.js up to 22.23.2/24.21.0/26.11.0. This issue affects the function crypto.randomUUID/crypto.randomUUIDv7/crypto.randomInt of the component Crypto. This manipulation causes insufficiently random values.

This vulnerability is handled as CVE-2026-106074. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More