CVE-2023-32003

score

<0.1

cvss

5.3

epss

1.2%

published

2023-08-15

kev added

—

first seen

2026-10-21

Node.js 20 with experimental permission model contains a directory creation flaw caused by missing path validation in fs.mkdtemp() and fs.mkdtempSync(), letting attackers create arbitrary directories, exploit requires use of the experimental permission model.