Tag

Ipc

2 briefs RSS

Node.js Permission Model Bypass via Unix Domain Sockets (CVE-2026-21711)

CVE-2026-21711 allows code running under the Node.js permission model without network access to create and expose local IPC endpoints via Unix Domain Sockets, bypassing intended network restrictions and enabling inter-process communication.

Node.js 25.x nodejs permission model uds unix domain socket ipc cve-2026-21711

2r 1t 1c 2w ago

high advisory

MiroFish Command Injection Vulnerability (CVE-2026-7058)

2 rules 1 TTP 1 CVE

A command injection vulnerability exists in 666ghj MiroFish version 0.1.2 via the SimulationIPCClient.send_command function, allowing remote attackers to execute arbitrary commands.

MiroFish command-injection vulnerability ipc

2r 1t 1c Jan 3, 2024