CVE-2026-58039 – Node.js Permission Model File Write Bypass

CVE ID :CVE-2026-58039

Published : July 31, 2026, 1:16 a.m. | 29 minutes ago

Description :A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside –allow-fs-write paths.

This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.

This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

Severity: 3.3 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…