- Node.js October 2026 release contains CVE‑2026‑111497, a remote code execution vulnerability.
- The flaw affects Retool services that issue HTTP requests to user‑configured URLs, potentially allowing attackers to execute code.
- Update to the patched Node.js version to mitigate the security risk.