A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.