EUVD-2026-81295
GHSA-5635-p6jj-6g9p
Severity by source
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H because exploitation needs the sandbox enabled and the specific legacy resolveContent signature on untrusted content; C:H for arbitrary file read, I:L for limited SSRF, A:N.
Primary rating from Vendor (vulncheck).
CVSS VectorVendor: vulncheck
Lifecycle Timeline
3DescriptionCVE.org
Nodemailer (npm package nodemailer) versions 9.1.0 and earlier do not honor the disableFileAccess and disableUrlAccess sandbox options when message content is resolved through the public plugin API MailMessage.resolveContent() using the documented legacy three-argument signature resolveContent(data, key, callback). Because shared.resolveContent() normalizes the missing options argument to an empty object, the message-level flags copied into mail.data by the MailMessage constructor are discarded, and resolveContentValue() skips both access-control checks, reaching nmfetch(url) or fs.createReadStream(path). As a result, plugin or application code that resolves untrusted message content (html, text, attachment path or href) via this API can be induced to read arbitrary local files or issue outbound HTTP(S) requests (server-side request forgery), bypassing the sandbox the application enabled. The internal paths used by transporter.sendMail() (resolveAll(), _convertDataImages(), and the MIME streaming path) are not affected. Fixed in version 9.1.1.
AnalysisAI
Arbitrary local file read and server-side request forgery are possible in the Nodemailer npm package through version 9.1.0 when an application that has deliberately enabled the disableFileAccess/disableUrlAccess sandbox resolves untrusted message content through the legacy three-argument API MailMessage.resolveContent(data, key, callback). Because the omitted options argument is normalized to an empty object inside shared.resolveContent(), the message-level sandbox flags copied into mail.data by the MailMessage constructor are discarded and resolveContentValue() skips both access-control guards, reaching fs.createReadStream() for local files or nmfetch() for outbound HTTP(S) requests driven by attacker-controlled html, text, or attachment path/href values. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Two prerequisites must both hold: (1) the application deliberately enabled the disableFileAccess and/or disableUrlAccess sandbox options at the transporter/message level, expecting untrusted email content to be contained; and (2) plugin or application code resolves that untrusted content (html, text, or attachment path/href) through the public API MailMessage.resolveContent() using the legacy three-argument signature resolveContent(data, key, callback) - the form that omits the options object. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate-severity, condition-gated sandbox bypass rather than a broadly exploitable flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade Nodemailer to 9.1.1, which contains the fixes in commits ab7ef348b9a97b1fd70e7bfbeb56d4ea4a07946b and dc48ed395c4d6c79ee5c95eb6eff17bafe391474; the upgrade is the primary and complete remediation and should be validated against the advisory at https://github.com/nodemailer/nodemailer/security/advisories/GHSA-8m3c-c648-2xjj. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could
FortiOS and FortiProxy contain an authentication bypass via the Node.js websocket module allowing unauthenticated remote
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for t
Flowise version 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig paramete
Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was inc
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Rated critical severity (CVSS 9.8), this vulner
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary fi
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwin
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, whic
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a
Same weakness CWE-73 – External Control of File Name or Path
View allShare
External POC / Exploit Code
Leaving vuln.today