CVE-2026-95860

The node-opcua implementation for TypeScript and Node.js contains a Namespace-Level RBAC Fail-Open vulnerability affecting versions 2.42.0 through 2.180.0 . The root cause is that the runtime enforcement path fails to honor setDefaultRolePermissions for nodes lacking explicit per-node RolePermiss...