CVE-2026-21715 | Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1 File Existence fs.realpathSync.native information disclosure

A vulnerability was found in Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1 and classified as problematic. This vulnerability affects the function fs.realpathSync.native of the component File Existence Handler. Executing a manipulation can lead to information disclosure.

This vulnerability appears as CVE-2026-21715. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.