Node-RED Library DoS (CVE-2026-71269)

CVE-2026-71269 in Node-RED 3.0.0–5.0.4 on Node.js = 15: POST /library/local//%2e%2e makes saveLibraryEntry write to the library directory itself; the discarded util.writeFile EISDIR rejection becomes an uncaught exception and Node-RED exits. The HTTP layer answers 204 before the crash. DESTRUCTIV...

PT-2026-68142

Name of the Vulnerable Software and Affected Versions Node-RED affected versions not specified Description The local-filesystem library storage module contains a path traversal flaw in the getLibraryEntry and saveLibraryEntry functions. This issue occurs because the user-supplied path parameter i...