🎯 New Report #3815767: Permission Model bypass: process.report writes (and overwrites) files outside --allow-fs-write paths
🔺Severity: Low
👽 Reporter: sinan-polat
⭐️ Reputation: 107
🛠 State: resolved
💼 Team: Node.js
💵 Bounty: null
🕐 Submitted: 2026-06-21
⏰ Disclosed: 2026-07-30 15:07:10
📝 Summary: A flaw was found in the Node.js Permission Model enforcement that allowed the process.report function to write (and overwrite) files outside the --allow-fs-write paths.
📂 Report JSON File: 3815767
@hackeronereports