Node.js Permission Model bypass: UDS server bind/listen works without `--allow-net`

Disclosed: 2026-03-30 16:42:22 By xavlimsg To nodejs

Medium

Vulnerability Details

No vulnerability description provided or it is restricted.

Actions

View on HackerOne

Report Stats

Report ID: 3559715
State: Closed
Substate: resolved
Upvotes: 2

Share this report