CVE-2025-27210 is a high-severity vulnerability in Node.js affecting the path.join API on Windows platforms. It involves an incomplete fix for a previous issue (CVE-2025-23084) related to handling Windows device names such as CON, PRN, and AUX. This flaw could allow an attacker to manipulate file paths, potentially leading to unauthorized file access or other impacts. Public exploit code is available, indicating the vulnerability is well-understood, but there is no confirmation of active exploitation in the wild. No specific affected versions or patch information is provided.