CVE-2025-61925

Astro is a web framework. Prior to version 5.14.2, Astro reflects the value in `X-Forwarded-Host` in output when using `Astro.url` without any validation. It is common for web servers such as nginx to route requests via the `Host` header, and forward on other request headers. As such as malicious request can be sent with both a `Host` header and an `X-Forwarded-Host` header where the values do not match and the `X-Forwarded-Host` header is malicious. Astro will then return the malicious value. This could result in any usages of the `Astro.url` value in code being manipulated by a request. For example if a user follows guidance and uses `Astro.url` for a canonical link the canonical link can be manipulated to another site. It is theoretically possible that the value could also be used as a login/registration or other form URL as well, resulting in potential redirecting of login credentials to a malicious party. As this is a per-request attack vector the surface area would only be to the malicious user until one considers that having a caching proxy is a common setup, in which case any page which is cached could persist the malicious value for subsequent users. Many other frameworks have an allowlist of domains to validate against, or do not have a case where the headers are reflected to avoid such issues. This could affect anyone using Astro in an on-demand/dynamic rendering mode behind a caching proxy. Version 5.14.2 contains a fix for the issue.

• CWE-470

• https://github.com/Chisnet/minimal_dynamic_astro_serverProduct
• https://github.com/withastro/astro/security/advisories/GHSA-5ff5-9fcw-vg88Exploit, Third Party Advisory

Published

Oct 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6192Use after free in Metrics in Google Chrome prior to 137.0.71…8.8
• CVE-2025-61920Authlib is a Python library which builds OAuth and OpenID Co…7.5
• CVE-2025-61921Sinatra is a domain-specific language for creating web appli…7.5
• CVE-2025-61922PrestaShop Checkout is the PrestaShop official payment modul…9.1
• CVE-2025-61923PrestaShop Checkout is the PrestaShop official payment modul…4.1
• CVE-2025-61924PrestaShop Checkout is the PrestaShop official payment modul…3.8
• CVE-2025-61926Allstar is a GitHub App to set and enforce security policies…4.6
• CVE-2025-61927Happy DOM is a JavaScript implementation of a web browser wi…7.2
• CVE-2025-61928Better Auth is an authentication and authorization library f…9.3
• CVE-2025-61929Cherry Studio is a desktop client that supports for multiple…9.6
• CVE-2025-6193A command injection vulnerability was discovered in the Trus…5.9
• CVE-2025-61930Emlog is an open source website building system. Emlog Pro v…8.8