Skip to main content

Excessive Use of Unconditional Branching

CVE-2026-56847

Severity Low
Score 3.3/10

Summary

A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js versions 22.x prior to 22.23.2, 24.x prior to 24.18.1 and 26.x prior to 26.5.1.

  • LOW
  • LOCAL
  • LOW
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • NONE

CWE-1119 - Excessive Use of Unconditional Branching

The code uses too many unconditional branches (such as "goto").

Advisory Timeline

  • Published