Critical Vulnerability in Popular Node.js Library Exposes Windows Systems to RCE Attacks

Cybersecuritynews •Abinaya • December 18, 2025

A serious security flaw has been discovered in systeminformation, a popular Node.js library used by thousands of developers. The vulnerability, labelled CVE-2025-68154, allows attackers to run malicious code on Windows computers. All versions up to 5.27.13 are affected, and developers must update to version 5.27.14 immediately. Systeminformation is a widely-used Node.js package that helps developers […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Node.js Library Allows RCE on Windows Systems A critical vulnerability, CVE-2025-68154, has been identified in the systeminformation Node.js library, affecting all versions up to 5.27.13. This flaw enables attackers to execute remote commands on Windows systems, prompting developers to update to version 5.27.14 immediately to mitigate risks. 2 sources 66

Extracted Entities

Critical Vulnerability in Popular Node.js Library Exposes Windows Systems to RCE Attacks

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)

Tools (1)