Vulnerability detail
CVE-2026-56847
中Node.jsに関する脆弱性
公開: 2026/07/30
更新: 2026/10/24
概要
A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.