CVE-2023-30586

score

<0.1

cvss

7.5

epss

1.3%

published

2023-07-01

kev added

—

first seen

2026-10-21

Node.js 20 contains a privilege escalation caused by loading arbitrary OpenSSL engines when the experimental permission model is enabled, letting attackers bypass or disable the permission model, exploit requires calling crypto.setEngine() with a compatible engine.