CVE-2025-23084 is a vulnerability in Node.js affecting the handling of drive names on Windows. The issue arises because certain Node.js functions, specifically the path.join API, do not treat drive names as special. This causes paths assumed to be relative to actually refer to the root directory, potentially leading to unintended file system access. The vulnerability has a medium severity with a CVSS score of 5.6.