CVE-2026-48936 - Node.js: Insufficient Permissions Check Leading to Unauthorized Socket Server Creation
Posted: Fri Jun 26, 2026 3:18 am
CVE ID: CVE-2026-48936
Published: June 26, 2026
Description: A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.
Severity: 0.0 | NA
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-48936
Published: June 26, 2026
Description: A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.
Severity: 0.0 | NA
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-48936