What is the CVSS score of CVE-2026-33768?

CVE-2026-33768 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Astro are affected by CVE-2026-33768?

Organizations using Astro should be aware of notable risk from CVE-2026-33768 rated CVSS 6.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-33768?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Astro CVE-2026-33768

EUVD-2026-14982 MEDIUM

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441)

2026-03-24 GitHub_M

GHSA-mr6q-rp88-fx84

Authentication Bypass Astro

6.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 24, 2026 - 19:00 euvd

EUVD-2026-14982

Analysis Generated

Mar 24, 2026 - 19:00 vuln.today

CVE Published

Mar 24, 2026 - 18:40 nvd

MEDIUM 6.5

DescriptionGitHub Advisory

Astro is a web framework. Prior to version 10.0.2, the @astrojs/vercel serverless entrypoint reads the x-astro-path header and x_astro_path query parameter to rewrite the internal request path, with no authentication whatsoever. On deployments without Edge Middleware, this lets anyone bypass Vercel's platform-level path restrictions entirely. The override preserves the original HTTP method and body, so this isn't limited to GET. POST, PUT, DELETE all land on the rewritten path. A Firewall rule blocking /admin/* does nothing when the request comes in as POST /api/health?x_astro_path=/admin/delete-user. This issue has been patched in version 10.0.2.

AnalysisAI

The @astrojs/vercel serverless adapter in Astro versions prior to 10.0.2 contains an unauthenticated path traversal vulnerability that allows attackers to bypass platform-level security restrictions by manipulating the x-astro-path header and x_astro_path query parameter. Any remote attacker without authentication can rewrite internal request paths to access restricted endpoints such as /admin/*, with the attack preserving the original HTTP method and request body, enabling POST, PUT, and DELETE operations against protected resources. The vulnerability has been patched in version 10.0.2, and proof-of-concept code is available via the referenced GitHub security advisory and pull request.

Technical ContextAI

Astro is a modern web framework built on Node.js for server-side rendering and static site generation. The affected component is @astrojs/vercel, which is the official adapter for deploying Astro applications to Vercel's serverless platform. The vulnerability exists in the serverless entrypoint handler that processes incoming HTTP requests; this handler unconditionally reads and acts upon the x-astro-path header and x_astro_path query parameter to rewrite the internal request URI before routing. The root cause is classified under CWE-441 (Unprotected Transport of Credentials), more precisely manifesting as an authentication bypass vulnerability where security-critical request routing decisions are made without validation or authentication checks. The vulnerability is particularly dangerous because it operates below Vercel's platform-level firewall rules and path-based access controls, which are rendered ineffective when the internal path rewrite occurs server-side within the Astro application layer.

RemediationAI

Immediately upgrade the @astrojs/vercel adapter to version 10.0.2 or later by updating your package.json dependency and running npm install (or equivalent package manager command). The patch commit 335a204161f5a7293c128db570901d4f8639c6ed removes the unsanitized path rewrite logic. As an interim measure if immediate patching is not possible, implement Vercel Edge Middleware with explicit authentication and authorization checks for all sensitive routes (especially /admin/* patterns), and validate all incoming requests against a whitelist of allowed paths before processing. Additionally, review Vercel firewall rules and WAF configurations to ensure they are properly deployed; however, note that platform-level rules alone are insufficient mitigation due to the server-side nature of this vulnerability. Audit application logs for suspicious x-astro-path or x_astro_path parameter usage patterns that may indicate exploitation attempts. See https://github.com/withastro/astro/pull/15959 for technical details of the fix.