CVE-2026-48617

A path-validation flaw in Node.js Permission Model enforcement allows process.report.writeReport() to bypass intended filesystem restrictions, leading to confidentiality impact. NVD rates it HIGH (CVSS 8.2, network, no auth). CISA SSVC confirms no active exploitation. Affected: Node.js 22, 24, 26...