CVE-2026-119201

Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generated appSecret in <buildDir>/app-secret, by default .nuxt/app-secret, within a directory allowed by Vite's server.fs configuration. A client with direct HTTP access to an exposed development server can fetch the file, use deriveSecret() to compute derived secrets such as the default useSession password, and forge session cookies accepted by that development server. The default localhost binding limits remote exposure, cross-origin browser reads are blocked, production builds and development servers with an explicitly configured appSecret are not affected. This issue is fixed in version 4.6.3.

• CWE-552

• https://github.com/nuxt/nuxt/commit/2981290f36d9c5412c022758f3d89ba21a845308
• https://github.com/nuxt/nuxt/commit/545004cc350be7003dea4116ce6206d6f980b1fd
• https://github.com/nuxt/nuxt/releases/tag/v4.6.3
• https://github.com/nuxt/nuxt/security/advisories/GHSA-3xf4-9g3c-4h4w

Published

Oct 29, 2026

Last Modified

Oct 30, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-119197pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5…7.5
• CVE-2026-119198Nuxt is an open-source web development framework for Vue.js.…5.9
• CVE-2026-119199Nuxt is an open-source web development framework for Vue.js.…5.9
• CVE-2026-1192A vulnerability was determined in Tosei Online Store Managem…7.3
• CVE-2026-11920The JoomSport – for Sports: Team & League, Football, Hockey …4.9
• CVE-2026-119200Nuxt is an open-source web development framework for Vue.js.…6.5
• CVE-2026-119202@hapi/content provides HTTP Content-* header parsing. From 3…7.5
• CVE-2026-119203pypdf is a free and open-source pure-python PDF library. Pri…7.1
• CVE-2026-119204pypdf is a free and open-source pure-python PDF library. Pri…7.1
• CVE-2026-119205pypdf is a free and open-source pure-python PDF library. Pri…7.1
• CVE-2026-119206pypdf is a free and open-source pure-python PDF library. Pri…7.1
• CVE-2026-119207pypdf is a free and open-source pure-python PDF library. Pri…7.1