2 matches found
nodejs: Nodejs file permissions bypass
A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...
9.1CVSS7.5AI score0.01662EPSS
SaveExploits2References5
Linux Distros Unpatched Vulnerability : CVE-2025-55130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js's Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By...
9.1CVSS7.6AI score0.01662EPSS
SaveExploits2References2
20