CVE-2026-71476

Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded cache artifacts without constraining where files are written. A malicious or on-path (MITM) remote cache server can return a crafted tar archive whose entries escape the cache directory and write to arbitrary locations on the machine running Nx, which can be escalated to remote code execution. Nx's default local cache and Nx Cloud are not affected; only workspaces configured to use a self-hosted remote cache are affected. This issue is fixed in versions 22.7.7 and 23.0.2.

• CWE-22
• CWE-59

• https://github.com/nrwl/nx/commit/2b20c2da39d263c32ae05767577589481a309fee
• https://github.com/nrwl/nx/commit/a82807621e4176e37909d2c1afede661b45cc30
• https://github.com/nrwl/nx/commit/ad296578fe980a4aad66f8af0add21f6ddf907d9
• https://github.com/nrwl/nx/pull/36116
• https://github.com/nrwl/nx/security/advisories/GHSA-vp3h-ghgh-jr7g

Published

Aug 6, 2026

Last Modified

Sep 18, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71470A flaw was found in the search-v2-operator. This vulnerabili…9.1
• CVE-2026-71471A flaw was found in acm-search-v2-rhel9. An attacker with ad…9
• CVE-2026-71472A flaw was found in acm-search-v2-rhel9. This vulnerability …9.1
• CVE-2026-71473A flaw was found in the `search-v2-operator` component. A us…8.5
• CVE-2026-71474A flaw was found in insights-client. When the application re…7.1
• CVE-2026-71475A flaw was found in insights-client. A compromised managed c…6.8
• CVE-2026-71477mise manages dev tools like node, python, cmake, and terrafo…6.7
• CVE-2026-71478league/commonmark is a PHP library for parsing and rendering…6.1
• CVE-2026-71479New API is a large language mode (LLM) gateway and artificia…9.1
• CVE-2026-7148A flaw has been found in CodeAstro Online Classroom 1.0. Thi…6.3
• CVE-2026-71483Horilla is an HR and CRM software. Prior to 1.6.0, the searc…8.5
• CVE-2026-71485Centrifugo is an open-source scalable real-time messaging se…9.1