CVE-2025-55130
published 2026-01-20CVE-2025-55130: A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By…
PriorityP261critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
1.63%
73.6th percentile
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise.
This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nodejs | < nodejs 22.22.0+dfsg+~cs22.19.6-1 (forky) | nodejs 22.22.0+dfsg+~cs22.19.6-1 (forky) |
| nodejs | node | 20.19.6 – 20.19.6 | — |
| nodejs | node | 22.21.1 – 22.21.1 | — |
| nodejs | node | 24.12.0 – 24.12.0 | — |
| nodejs | node | 25.2.1 – 25.2.1 | — |
| nodejs | node.js | >= 20.0.0 < 20.20.0 | 20.20.0 |
| nodejs | node.js | >= 22.0.0 < 22.22.0 | 22.22.0 |
| nodejs | node.js | >= 24.0.0 < 24.13.0 | 24.13.0 |
| nodejs | node.js | >= 25.0.0 < 25.3.0 | 25.3.0 |
| nodejs | nodejs | >= 0 < 22.22.2-r0 | 22.22.2-r0 |
| nodejs | nodejs | >= 0 < 22.22.0-r0 | 22.22.0-r0 |
| nodejs | nodejs | >= 0 < 24.13.0-r0 | 24.13.0-r0 |
| nodejs | nodejs | >= 0 < 20.19.2+dfsg-1+deb13u1 | 20.19.2+dfsg-1+deb13u1 |
| nodejs | nodejs | >= 0 < 22.22.0+dfsg+~cs22.19.6-1 | 22.22.0+dfsg+~cs22.19.6-1 |
Detection & IOCsextracted from sources · hover to see the quote
- →Exploit vector involves chaining directories and symlinks using crafted relative symlink paths to bypass --allow-fs-read and --allow-fs-write restrictions in Node.js Permission model ↗
- →Affected Node.js versions are v20, v22, v24, and v25; inventory and alert on these specific major versions running with the Permission model enabled ↗
- →In the observed attack chain, the vulnerable Node.js runtime was detected as node.exe listening on TCP port 18792; monitor for node.exe binding to this port as a potential indicator of OpenClaw/clawdbot agent activity on a host ↗
- →Confirmed affected version in the wild: Node.js 22.12.0; prioritize detection and patching of this specific version ↗
- ·Red Hat notes no mitigation meeting their criteria is currently available for unpatched systems; fixed versions should be applied ↗
- ·Debian fixed the vulnerability in Node.js 22.22.0 (sid/forky) and 20.19.2 (trixie/bookworm); detections should account for these fixed versions to avoid false positives ↗
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvdv3.07.1HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
osv9.1CRITICAL
vendor_debian9.1LOW
vendor_redhat9.1CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nodejs: Nodejs file permissions bypass
vendor_redhat·2026-01-20·CVSS 9.1
CVE-2025-55130 [CRITICAL] CWE-281 nodejs: Nodejs file permissions bypass
nodejs: Nodejs file permissions bypass
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise.
This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current
Debian
CVE-2025-55130: nodejs - A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-rea...
vendor_debian·2025·CVSS 9.1
CVE-2025-55130 [CRITICAL] CVE-2025-55130: nodejs - A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-rea...
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise. This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 22.22.0+dfsg+~cs22.19.6-1)
sid: resolved (fixed in 22.22.0+dfsg+~cs22.19.6-1)
trixie: resolved (fixed in 20.19.2+dfsg-1+deb13u1)
OSV
CVE-2025-55130: A flaw in Node
osv·2026-01-20·CVSS 9.1
CVE-2025-55130 [CRITICAL] CVE-2025-55130: A flaw in Node
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise. This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
GHSA
GHSA-62wc-jj78-f4f6: A flaw in Node
ghsa_unreviewed·2026-01-20
CVE-2025-55130 [HIGH] CWE-289 GHSA-62wc-jj78-f4f6: A flaw in Node
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise.
This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
OSV
CVE-2025-55130: A flaw in Node
osv·2026-01-20·CVSS 9.1
CVE-2025-55130 [CRITICAL] CVE-2025-55130: A flaw in Node
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise.
This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-55130 nodejs18: Nodejs file permissions bypass [fedora-42]
bugzilla·2026-01-21·CVSS 9.1
CVE-2025-55130 [CRITICAL] CVE-2025-55130 nodejs18: Nodejs file permissions bypass [fedora-42]
CVE-2025-55130 nodejs18: Nodejs file permissions bypass [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '42'.
Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version'
to a lat
Bugzilla
CVE-2025-55130 nodejs: Nodejs file permissions bypass
bugzilla·2026-01-20·CVSS 9.1
CVE-2025-55130 [CRITICAL] CVE-2025-55130 nodejs: Nodejs file permissions bypass
CVE-2025-55130 nodejs: Nodejs file permissions bypass
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise.
This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 10
Via RHSA-2026:1843 https://access.redhat.com/errata/RHSA-2026:1843
---
This issue has been addressed in the following prod
Qualys
Oracle Critical Patch Update, April 2026 Security Update Review
blogs_qualys·2026-04-22
CVE-2025-6965 Oracle Critical Patch Update, April 2026 Security Update Review
## Table of Contents
Qualys QID Coverage
Notable Oracle Vulnerabilities Patched
Oracle released its second quarterly edition of this year’s Critical Patch Update. The update received patches for 481 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products.
In this quarterly Oracle Critical Patch Update, Oracle Communications received the highest number of patches, 139, constituting about 28% of the total patches released. Oracle Financial Services Applications and Oracle Fusion Middleware followed, with 75 and 59 security patches.
376 of the 481 security patches provided by the April Critical Patch Update (about 78%)
Qualys
Anatomy of an Autonomous AI Agent Risk: How Qualys ETM Connects the Dots on OpenClaw
blogs_qualys·2026-04-13
Anatomy of an Autonomous AI Agent Risk: How Qualys ETM Connects the Dots on OpenClaw
## Table of Contents
How the Investigation Begins
The First Signal Qualys VMDR
A Second, Independent Confirmation: Microsoft Defender Vulnerability Management
From Software Inventory to Active Attack Surface with Qualys EASM
Why Identity Context Changes the Severity?
The OpenClaw Lesson: Why Visibility Alone is No Longer Enough
The Power of Contextual Correlation
Frequently Asked Questions (FAQs)
Contributors
## Executive Summary
An unauthorized OpenClaw AI agent was detected disguised as a routine package on a Windows Server host. The situation escalated into a priority incident when Qualys ETM analyzed and correlated four distinct signals. While none of these signals alone warranted urgent action, the combination of endpoint, exposure, and identity telemetry indicated an activ
Wiz
CVE-2025-55130 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 9.1
CVE-2025-55130 [CRITICAL] CVE-2025-55130 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-55130 :
Node.js vulnerability analysis and mitigation
--allow-fs-read
--allow-fs-write
Source : NVD
## 9.1
Score
Published January 20, 2026
Severity CRITICAL
CNA Score 7.1
Affected Technologies
Node.js
Rocky Linux
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 3
Exploitation Probability (EPSS) N/A
Affected packages and libraries
nodejs:20::npm
nodejs20-devel
Sources
AlmaLinux 8 Severity HIGH Has Fix Added at: Feb 15, 2026
AlmaLinux 9 Severity HIGH Has Fix Added at: Feb 19, 2026
Alpine 3.21 Severity CRITICAL Has Fix Added at: Apr 06, 2026
Alpine 3.22 Severity CRITICAL Has Fix Added at: Jan 23, 2026
Alpine 3.23, edge Severity CRITICAL Has Fix Added at: Jan 18, 2
https://nodejs.org/en/blog/vulnerability/december-2025-security-releaseshttps://access.redhat.com/errata/RHSA-2026:1842https://access.redhat.com/errata/RHSA-2026:1843https://access.redhat.com/errata/RHSA-2026:2420https://access.redhat.com/errata/RHSA-2026:2421https://access.redhat.com/errata/RHSA-2026:2422https://access.redhat.com/errata/RHSA-2026:2767https://access.redhat.com/errata/RHSA-2026:2768https://access.redhat.com/errata/RHSA-2026:2781https://access.redhat.com/errata/RHSA-2026:2782https://access.redhat.com/errata/RHSA-2026:2783https://access.redhat.com/errata/RHSA-2026:2864https://access.redhat.com/errata/RHSA-2026:2899https://access.redhat.com/errata/RHSA-2026:6402https://access.redhat.com/errata/RHSA-2026:6431https://access.redhat.com/errata/RHSA-2026:7386https://access.redhat.com/errata/RHSA-2026:7387https://access.redhat.com/security/cve/CVE-2025-55130https://bugzilla.redhat.com/show_bug.cgi?id=2431352https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55130.json
2026-01-20
Published