VULNERABILITY INTELLIGENCE

CVE-2026-56301

CVSS score5.5 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-06-23
Last modified2026-06-25
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vite-node IPC server to an abstract-namespace Unix socket without permission restrictions, allowing local users to enumerate and connect. Unprivileged co-resident users can exploit the unprotected module request handler to read arbitrary files such as .env and SSH keys through the SSR plugin pipeline. Production builds are unaffected, as the IPC server runs only in development.

Weakness classification

  • disclosure@vulncheck.com: CWE-276

Primary references