CVE-2026-114131

Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rule keys with the raw request path while route resolution decodes dynamic and catch-all parameters, allowing a percent-encoded segment to resolve to a protected page without matching the routeRules entry intended for that path. As a result, appMiddleware can be skipped during server rendering and an unauthenticated requester can receive the gated page and its SSR data. The same mismatch affects app-manifest rules including redirect, appLayout, ssr, prerender, and payload flags derived from cache, isr, and swr. This vulnerability is fixed in 4.4.4 and 3.21.4.

• CWE-436
• CWE-863

• https://github.com/nuxt/nuxt/commit/81f86ac5ee82bb1a9b887e59f3bc84624d711497
• https://github.com/nuxt/nuxt/commit/9123ed850c468a7424a868c20d0d49a5507d32e5
• https://github.com/nuxt/nuxt/releases/tag/v3.21.11
• https://github.com/nuxt/nuxt/releases/tag/v4.5.2
• https://github.com/nuxt/nuxt/security/advisories/GHSA-6gq8-jgmh-3ffp

Published

Oct 21, 2026

Last Modified

Oct 22, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-114126Storybook is a frontend workshop for building user interface…8.7
• CVE-2026-114127Astro is a web framework for content-driven websites. From 7…2.3
• CVE-2026-114128Astro is a web framework for content-driven websites. Prior …6.5
• CVE-2026-114129stream-json is a micro-library of stream components for proc…6.2
• CVE-2026-11413A security vulnerability has been detected in JingDong JD Cl…8.8
• CVE-2026-114130Nuxt is an open-source web development framework for Vue.js.…2.3
• CVE-2026-114132Nuxt is an open-source web development framework for Vue.js.…6.3
• CVE-2026-114133Nuxt is an open-source web development framework for Vue.js.…5.4
• CVE-2026-114135Jupyter Server is the backend for Jupyter web applications. …8.8
• CVE-2026-114136Django REST framework is a toolkit for building Web APIs. Fr…7.5
• CVE-2026-114137Django REST framework is a toolkit for building Web APIs. Fr…7.4
• CVE-2026-114138Django REST framework is a toolkit for building Web APIs. Pr…7.5