Threats affecting pkg:npm/eta-remote

CVE-2026-121267 is an incorrect default permissions vulnerability in the eta-remote software developed by TÜBİTAK BİLGEM Software Technologies Research Institute. The flaw allows unauthorized access to functionality due to improper access control lists (ACLs). This affects versions from 0.0.2 up to but not including 0.0.3. The vulnerability has a high severity with a CVSS score of 7.8. A fix is available in version 0.0.3.