PT-2026-2468 · Node.Js+1 · Node.Js+1

Published 2025-01-01 · Updated 2026-02-17 · CVE-2025-55130

Positive Technologies · (AI Summary)

CVSS v3.1

9.1

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Node.js (affected versions not specified)

Description A flaw exists in the Node.js software platform due to incorrect path name restriction for restricted access directories. Successful exploitation of this issue could allow an attacker to compromise the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-289

CWE-22

Related Identifiers

ALSA-2026:1842

ALSA-2026:1843

ALSA-2026:2420

ALSA-2026:2421

ALSA-2026:2422

ALSA-2026:2781

ALSA-2026:2782

ALSA-2026:2783

BDU:2026-00545

BIT-NODE-2025-55130

BIT-NODE-MIN-2025-55130

CVE-2025-55130

MGASA-2026-0009

OESA-2026-1218

OESA-2026-1219

OESA-2026-1220

OESA-2026-1221

OPENSUSE-SU-2026:10062-1

OPENSUSE-SU-2026:10074-1

OPENSUSE-SU-2026:20236-1

RHSA-2026:1842

RHSA-2026:1843

RHSA-2026:2420

RHSA-2026:2421

RHSA-2026:2422

RHSA-2026:2767

RHSA-2026:2768

RHSA-2026:2781

RHSA-2026:2782

RHSA-2026:2783

RHSA-2026:2864

RHSA-2026:2899

SUSE-SU-2026:0295-1

SUSE-SU-2026:0301-1

SUSE-SU-2026:0435-1

SUSE-SU-2026:0457-1

SUSE-SU-2026:20436-1

Affected Products

Node.Js

Rocky Linux

References · 118

• https://bdu.fstec.ru/vul/2026-00545 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0295-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:2781 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55131 · Security Note
• https://linux.oracle.com/errata/ELSA-2026-2420.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-2782.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:2421 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:2420 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2026-0009.html · Security Note
• https://osv.dev/vulnerability/ALSA-2026:2782 · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-1842.html · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1221 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10074-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-55130 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:1843 · Vendor Advisory