high8.2
CVE-2026-48617
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation.
Impact
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nodejs | Node.Js | from 22.0.0 through 22.22.3 from 24.0.0 through 24.16.0 from 26.0.0 through 26.3.0 |