POJIA破甲
地图 / CVE-2025-55132

CVE-2025-55132

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via futimes() even when the process has only read permissions

NVD CVSS
—
CWE
—
未来 30 天被利用概率
0.3%
利用等级
低概率(<1%)
发布时间
—

关联的公开报告 1 份

fs.futimes() Bypasses Read-Only Permission ModelNode.js · 低危 · 2026-01-15