EUVD-2026-51864
GHSA-38gx-cfqf-f652
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H reflects the mandatory pre-condition of a separate prototype-pollution primitive; no confidentiality impact in the base case; integrity and availability limited to header injection and downstream auth failures.
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4Blast Radius
ecosystem impact- 1,073 npm packages depend on axios (568 direct, 510 indirect)
Ecosystem-wide dependent count for version 1.15.2.
DescriptionCVE.org
axios versions >=1.15.2 and <1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling (lib/adapters/http.js and lib/helpers/resolveConfig.js). When an application is already affected by a separate prototype-pollution primitive and makes an axios request with an own auth object that omits the username and/or password properties, axios reads the inherited Object.prototype.username and Object.prototype.password values and uses them to construct an outbound 'Authorization: Basic ...' header. axios itself does not pollute prototypes. The practical impact is outbound request tampering: an attacker who controls the polluted prototype values can inject attacker-chosen Basic auth credentials or replace an existing Authorization header. Credential disclosure is only possible under additional application-specific conditions.
AnalysisAI
Prototype-pollution read-side gadgets in axios versions >=1.15.2 and <1.18.0 allow an attacker who already controls a separate prototype-pollution primitive in the host application to inject attacker-chosen Basic auth credentials into outbound HTTP requests. When axios processes a request with an own auth object that omits the username or password properties, it falls through to read Object.prototype.username and Object.prototype.password, constructing a forged Authorization: Basic header. Exploiting this requires chaining with a pre-existing prototype pollution vulnerability - axios itself does not pollute prototypes - and no public exploit or CISA KEV listing exists at time of analysis. The vendor-released patch is axios 1.18.0.
Technical ContextAI
CWE-1321 (Improperly Controlled Modification of Object Prototype Attributes) covers gadget-class vulnerabilities where code unintentionally reads from or writes to Object.prototype. This specific case is a read-side gadget: axios in lib/adapters/http.js (Node HTTP adapter) and lib/helpers/resolveConfig.js (browser/fetch/React Native shared resolver) accesses config.auth.username and config.auth.password without confirming these are own properties of the auth object. When the host process has already had Object.prototype polluted with username and password keys - via a separate, unrelated vulnerability such as a JSON-based deserialization gadget or a merge/assign flaw - axios's property access falls through the prototype chain and retrieves attacker-controlled values. A hardening introduced for a prior advisory (GHSA-q8qp-cvcw-x6jj) applied null-prototype protections to the top-level mergeConfig() output but left the nested auth subobject exposed. The affected CPE is cpe:2.3:a:axios:axios:*:*:*:*:*:*:*:* for versions >=1.15.2, <1.18.0.
RemediationAI
Upgrade axios to version 1.18.0 or later, which addresses the read-side gadget by ensuring auth subfield access is restricted to own properties. The upstream fix is available at commit 32fc489632377d214db55bfa4e2c48486a7d7ce2 (PR #11000) and is reflected in the 1.18.0 release. If immediate upgrade is not possible, a compensating control is to audit all axios call sites that pass a constructed or user-influenced auth object and ensure both username and password are always explicitly set as own properties before the call - for example, replacing auth: opts.auth || {} with auth: { username: opts.auth?.username ?? '', password: opts.auth?.password ?? '' }. A second compensating control is to eliminate the separate prototype pollution vectors in the host application, which would prevent the gadget from being reachable entirely; however, this approach is application-specific and may be difficult to verify completely. The vendor advisory is at https://github.com/axios/axios/security/advisories/GHSA-xj6q-8x83-jv6g.
More in Prototype Pollution
View allPrototype pollution in Adobe Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier enables arbitrary code execu
Prototype pollution in the farinspace Partners WordPress plugin (versions up to and including 0.2.0) enables remote unau
Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service
A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code vi
A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function
All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper s
This affects the package vm2 before 3.9.4 via a Prototype Pollution attack vector, which can lead to execution of arbitr
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Ser
alizeait unflatto <= 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/inde
A vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConf
A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 all
Chartist 1.x through 1.3.0 allows Prototype Pollution via the extend function. Rated critical severity (CVSS 9.8), this
Same technique Code Injection
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Module for SAP Applications 15 SP7 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| openSUSE Leap 16.0 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Affected |
| SUSE Linux Enterprise Module for SAP Applications 15 SP3 | Affected |
| SUSE Linux Enterprise Module for SAP Applications 15 SP4 | Affected |
| SUSE Linux Enterprise Module for SAP Applications 15 SP5 | Affected |
| SUSE Linux Enterprise Module for SAP Applications 15 SP6 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today