CVE-2026-48936 – Node.js: Insufficient Permissions Check Leading to Unauthorized Socket Server Creation

CVE ID :CVE-2026-48936

Published : June 26, 2026, 1:14 a.m. | 30 minutes ago

Description :A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `–allow-net` permission.

This vulnerability affects one supported release line: **Node.js 26**.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…