CVE-2023-23918

score

<0.1

cvss

7.5

epss

2.0%

published

2023-02-23

kev added

—

first seen

2026-10-21

Node.js <19.6.1, <18.14.1, <16.19.1, and <14.21.3 contain a privilege escalation caused by bypassing the experimental Permissions feature in Node.js, letting attackers access non-authorized modules via process.mainModule.require(), exploit requires enabling --experimental-policy.