Excessive Use of Unconditional Branching
CVE-2026-56847
Summary
A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js versions 22.x prior to 22.23.2, 24.x prior to 24.18.1 and 26.x prior to 26.5.1.
- LOW
- LOCAL
- LOW
- UNCHANGED
- NONE
- LOW
- NONE
- NONE
CWE-1119 - Excessive Use of Unconditional Branching
The code uses too many unconditional branches (such as "goto").
References
Advisory Timeline
- Published