VulnSocial

CVE-2024-36137Disclosure

LOWCVSS 3.3 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-31: 2Technical Details · 2026-03-31: 203-31
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-21716 An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permission checks, while their call… https://www.cve.org/CVERecord?id=CVE-2026-21716 ----- Traducción: CVE-2026-21716 Una… http://infoflow.cloud`

    Post summary

    The tweet highlights an incomplete fix that leaves permission checks missing on FileHandle.chmod() and chown(), exposing a new CVE (2026‑21716) related to the promises API.

    0000024
    65 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-21716 An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permission checks, while their call… https://www.cve.org/CVERecord?id=CVE-2026-21716

    Post summary

    The post points out an incomplete fix that leaves FileHandle.chmod() and FileHandle.chown() without required permission checks, highlighting a potential vulnerability tied to CVE-2026-21716.

    00000153
    56.9K followersView on X

Explore more

Back to dashboard