EUVD-2026-14982
GHSA-mr6q-rp88-fx84
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service Proxy/intermediary controls
|
| Impact | The CVSS v3.1 score of 6.5 (Medium) reflects an unauthenticated network-based attack with low complexity, resulting in partial confidentiality and integrity impact but no availability impact. However, real-world risk is elevated due to several compounding factors: (1) The attack vector is network-accessible with no prerequisites (AV:N/AC:L/PR:N), making exploitation trivial; (2) The vulnerability is fully automatable and requires no user interaction; (3) The technical impact is significant for deployments without Edge Middleware, allowing complete bypass of intended access controls to administrative and sensitive endpoints; (4) Proof-of-concept code is publicly available via GitHub advisory GHSA-mr6q-rp88-fx84 and the merged pull request #15959. The CVSS score may underestimate actual risk because it does not account for the scope of potential damage from unauthorized administrative access, POST/PUT/DELETE capability against protected resources, or the prevalence of Astro deployments using Vercel without edge-layer security. Organizations running affected versions without edge middleware should treat this as high-priority, regardless of the medium CVSS score, due to the ease of exploitation and severity of potential impact (data exfiltration, resource deletion, privilege escalation). |
| Exploit ScenarioDerived | An attacker discovers an Astro application deployed on Vercel with a protected /admin/delete-user endpoint that is blocked by platform firewall rules. The attacker sends a crafted POST request to /api/health?x_astro_path=/admin/delete-user with a malicious request body containing user deletion parameters. The @astrojs/vercel serverless handler reads the x_astro_path query parameter, internally rewrites the request path to /admin/delete-user, and routes the POST request to the delete-user endpoint, completely bypassing the firewall rule that was intended to block /admin/* paths. The attacker successfully deletes the target user without authentication or authorization. This attack requires only network access and knowledge of the existence of the protected endpoint; no credentials or user interaction is needed. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 24, 2026
The @astrojs/vercel serverless adapter in Astro versions prior to 10.0.2 contains an unauthenticated path traversal vulnerability that allows attackers to bypass platform-level security restrictions by manipulating the x-astro-path header and x_astro_path query parameter. Any remote attacker without authentication can rewrite internal request paths to access restricted endpoints such as /admin/*, with the attack preserving the original HTTP method and request body, enabling POST, PUT, and DELETE operations against protected resources. The vulnerability has been patched in version 10.0.2, and proof-of-concept code is available via the referenced GitHub security advisory and pull request.
RemediationAI
Immediately upgrade the @astrojs/vercel adapter to version 10.0.2 or later by updating your package.json dependency and running npm install (or equivalent package manager command). The patch commit 335a204161f5a7293c128db570901d4f8639c6ed removes the unsanitized path rewrite logic. As an interim measure if immediate patching is not possible, implement Vercel Edge Middleware with explicit authentication and authorization checks for all sensitive routes (especially /admin/* patterns), and validate all incoming requests against a whitelist of allowed paths before processing. Additionally, review Vercel firewall rules and WAF configurations to ensure they are properly deployed; however, note that platform-level rules alone are insufficient mitigation due to the server-side nature of this vulnerability. Audit application logs for suspicious x-astro-path or x_astro_path parameter usage patterns that may indicate exploitation attempts. See https://github.com/withastro/astro/pull/15959 for technical details of the fix.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in npm, euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Astro is a modern web framework built on Node.js for server-side rendering and static site generation. The affected component is @astrojs/vercel, which is the official adapter for deploying Astro applications to Vercel's serverless platform. The vulnerability exists in the serverless entrypoint handler that processes incoming HTTP requests; this handler unconditionally reads and acts upon the x-astro-path header and x_astro_path query parameter to rewrite the internal request URI before routing. The root cause is classified under CWE-441 (Unprotected Transport of Credentials), more precisely manifesting as an authentication bypass vulnerability where security-critical request routing decisions are made without validation or authentication checks. The vulnerability is particularly dangerous because it operates below Vercel's platform-level firewall rules and path-based access controls, which are rendered ineffective when the internal path rewrite occurs server-side within the Astro application layer.
Know when Astro gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
Lifecycle Timeline
2DescriptionGitHub Advisory
Astro is a web framework. Prior to version 10.0.2, the @astrojs/vercel serverless entrypoint reads the x-astro-path header and x_astro_path query parameter to rewrite the internal request path, with no authentication whatsoever. On deployments without Edge Middleware, this lets anyone bypass Vercel's platform-level path restrictions entirely. The override preserves the original HTTP method and body, so this isn't limited to GET. POST, PUT, DELETE all land on the rewritten path. A Firewall rule blocking /admin/* does nothing when the request comes in as POST /api/health?x_astro_path=/admin/delete-user. This issue has been patched in version 10.0.2.
Executive ViewAI
Organizations using Astro should be aware of notable risk from CVE-2026-33768 rated CVSS 6.5. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Related Vulnerabilities in Astro Framework Request Handling
View all 2SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla!. Rated critical severity (CVSS 9.8), this vulnerabi
Astro web framework versions prior to 9.5.4 contain a server-side request forgery vulnerability in error page handling t
Authorization bypass in the Astro web framework version 6.4.7 lets remote unauthenticated attackers reach protected rout
Astro is a web framework for content-driven websites. Rated high severity (CVSS 7.8), this vulnerability is remotely exp
Server-side request forgery in Astro's built-in image proxy lets unauthenticated remote attackers force the server to fe
Astro is a web framework for content-driven websites. Rated high severity (CVSS 7.2), this vulnerability is remotely exp
Astro is a web framework for content-driven websites. Rated medium severity (CVSS 6.9), this vulnerability is remotely e
Astro is a web framework. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authenticatio
Astro is a web framework. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authenticatio
Unvalidated reflection of the X-Forwarded-Host header in Astro (versions before 5.14.3) lets remote, unauthenticated att
Astro web framework versions 9.0.0 through 9.5.3 fail to validate remote image domains when the inferSize option is enab
Base-path prefix bypass in Astro prior to 7.2.4 allows unauthenticated remote attackers to reach protected server-side r
Exploit-DB