CVE-2026-49401

HighCVSS 8.4/10Last modified Oct 25, 2026

Description

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.14, Deno's permission system enforces filesystem and execution restrictions by comparing the requested path against the path supplied to --deny-read, --deny-write, --deny-run, or --deny-ffi. On macOS, that comparison was done at the raw-byte level while the APFS filesystem treats different Unicode spellings of the same name as the same file. That means a program could reach a denied path by spelling it differently than the deny rule. This vulnerability is fixed in 2.7.14.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Weakness enumeration

CWE-41 CWE-176

Affected software

Vendor	Product	Versions
denoland	deno	< 2.7.14

References

https://github.com/denoland/deno/security/advisories/GHSA-8xpq-cjcf-3wh9Exploit, Mitigation, Vendor Advisory

Timeline

Published: Jun 23, 2026
Last modified: Oct 25, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-494028.1Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno's node:child_process implementation provided an escapeShell CVE-2026-494056.2OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the local server exposes the s CVE-2026-494065.5Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.12, when Deno was run in BYONM mode (nodeModulesDir: "manual"), the CVE-2026-494077.7OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.44, its local /ws/dictat CVE-2026-494108.1OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site reque CVE-2026-494116.5Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.0, the Node.js compatibility TCP path checked the permission against CVE-2026-494127.8The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from userspace, then reacquired the CVE-2026-494137.1The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this fl CVE-2026-494147.8The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rat CVE-2026-494158.8During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this windo CVE-2026-494167.8The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buff CVE-2026-494177.0Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memo