{"id":"CVE-2026-106071","title":"nodejs: nodejs: Permission model bypass via wildcard path matching flaw (CVE-2026-106071)","summary":"A flaw was found in the Node.js Permission Model. Wildcard --allow-fs-read or --allow-fs-write rules can grant access to paths that do not match the intended wildcard when the requested path is shorter than the wildcard prefix and the radi…","severity":"low","cvss":3.6,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cvssSource":"vendor","cwe":"CWE-284","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","affected":["enterprise_linux 10","enterprise_linux 9"],"published":"2026-10-23","updated":"2026-10-26","sourceUpdated":"2026-10-26T11:05:39+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106071.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106071.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-106071"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2560018"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106071"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106071"},{"url":"https://nodejs.org/en/blog/vulnerability/october-2026-security-releases"}],"tags":["csaf","vex","red-hat","exploit-available","cve.org"],"epss":0.00193,"epssPercentile":0.08855,"exploits":{"github":1,"githubRepos":["https://github.com/CompleTetech-Security/node-cve-2026-106071-check"],"checkedAt":"2026-10-27T16:54:45.983Z"},"exploitAvailable":true,"ingestedAt":"2026-10-23T16:31:11.322Z","slug":"CVE-2026-106071","body":"## Overview\n\nA flaw was found in the Node.js Permission Model. Wildcard --allow-fs-read or --allow-fs-write rules can grant access to paths that do not match the intended wildcard when the requested path is shorter than the wildcard prefix and the radix-tree lookup stops comparing early. For example, --allow-fs-read=/etc/passwd.* may also allow reading /etc/passwd. This requires the wildcard grant to sit directly under the root of the permission tree (for example when it is the only grant for that scope). This is a different root cause from CVE-2026-58043 and affects the Node.js 26.x line.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 · updated 2026-10-26 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106071.json)\n\n**nodejs: nodejs: Permission model bypass via wildcard path matching flaw** — rated Low by Red Hat. Released 2026-10-23, updated 2026-10-26.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 9\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 9\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat Hardened Images\n\n## Remediation\n\nFix deferred\n\nWorkarounds / mitigations:\n\n- If the Permission Model is unused, do not enable --permission.\nWhen using --allow-fs-read/--allow-fs-write, avoid wildcard grants placed as the sole root-level rule; prefer explicit directory prefixes without ambiguous wildcards (CME-1303 Application-Level Filesystem Access Confinement: https://cmetaxonomy.org/entries/CME-1303.html).\nCombine application allowlists with OS confinement such as SELinux or container filesystem restrictions (CME-301: https://cmetaxonomy.org/entries/CME-301.html; CME…","depth":"twilight","depthScore":32,"depthScoreParts":{"impact":19.8,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":229083,"id":"CVE-2026-106071","ts":1792902180060,"field":"exploit_available","old":"false","new":"true"}]}