Threats tagged 'bit-node-2026-48617'

A vulnerability in the Node.js permission model allows bypass of intended security boundaries via path misvalidation in the process.report.writeReport() function. This affects multiple supported Node.js release lines including versions 22, 24, and 26. Red Hat has released updated hardened image RPMs that address this flaw. The vulnerability can lead to confidentiality impacts or security boundary bypass under affected configurations. The issue is tracked as CVE-2026-48617 and is rated with high severity.