npm: node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

Anonymous Write/Call Bypass via Unbound DefaultRolePermissions vulnerability discovered by ? in WordPress npm node-opcua versions = 2.42.0, 2.180.0...

npm: node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

Anonymous Write/Call Bypass via Unbound DefaultRolePermissions vulnerability discovered by ? in WordPress npm node-opcua-address-space versions = 2.42.0, 2.180.0...

npm: node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

Anonymous Write/Call Bypass via Unbound DefaultRolePermissions vulnerability discovered by ? in WordPress npm node-opcua-server versions = 2.42.0, 2.180.0...

CVE-2026-95860 node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured through setDefaultRolePermissions is not honored by the runtime enforcement path for nodes without explicit per-node RolePermissions...

CVE-2026-95860 node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured through setDefaultRolePermissions is not honored by the runtime enforcement path for nodes without explicit per-node RolePermissions...

CVE-2026-95860

The node-opcua implementation for TypeScript and Node.js contains a Namespace-Level RBAC Fail-Open vulnerability affecting versions 2.42.0 through 2.180.0 . The root cause is that the runtime enforcement path fails to honor setDefaultRolePermissions for nodes lacking explicit per-node RolePermiss...

CVE-2026-95860 node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured through setDefaultRolePermissions is not honored by the runtime enforcement path for nodes without explicit per-node RolePermissions...