EUVD-2026-60306Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Network-reachable unauthenticated GET with no user interaction; read-only route bypass yields limited confidentiality loss with no data modification and no availability impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Lifecycle Timeline
3DescriptionCVE.org
Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypoint.ts accepts x_astro_path for the public /_isr function based only on the x-vercel-isr header, allowing unauthenticated GET requests to render routes protected only by Vercel edge path rules or split edge middleware. This issue is fixed in 11.0.3.
AnalysisAI
Path override bypass in the @astrojs/vercel ISR entrypoint (versions 10.0.3 through 11.0.2) exposes edge-protected routes to unauthenticated remote access via a crafted GET request against the public /_isr function. The root cause is a confused deputy flaw (CWE-441): the origin entrypoint trusts the x-vercel-isr header - which Vercel itself sets on all external requests to /_isr - as sole authorization to accept an attacker-supplied x_astro_path query parameter, silently rewriting the rendered route behind the edge's back. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires three concurrent conditions: (1) the target application uses @astrojs/vercel version 10.0.3 through 11.0.2 with isr: true explicitly set in the Astro configuration - ISR must be actively enabled for the /_isr function to be registered and publicly addressable; (2) the target route being accessed is protected exclusively by Vercel edge-level controls, either Vercel project path rules or firewall rules that deny access to the route path, or split deployments with edgeMiddleware: true where authorization logic lives in Astro edge middleware rather than in the origin route handler; and (3) the /_isr endpoint must be publicly reachable, which is the default on Vercel deployments (the attacker does not need to send the x-vercel-isr header because Vercel itself sets it on all requests to /_isr). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 6.5 Medium score (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) correctly captures that exploitation requires no authentication and no user interaction over the network, but the I:L component is debatable since the attacker reads, not modifies, data - the official score may be treating the authorization control bypass itself as an integrity impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker identifies a Vercel-hosted Astro application with ISR enabled and a route such as /admin/dashboard protected exclusively by a Vercel project path rule. The attacker issues a single unauthenticated GET request - for example, curl https://target.vercel.app/_isr?x_astro_path=/admin/dashboard - and receives a fresh origin render of the protected page in the response body, since the edge evaluated access controls only against /_isr (permitted) and never against /admin/dashboard (blocked). … |
| Remediation | Upgrade @astrojs/vercel to version 11.0.3 or later, which is the vendor-confirmed patch version per the release at https://github.com/withastro/astro/releases/tag/@astrojs/vercel@11.0.3 and the security advisory at https://github.com/withastro/astro/security/advisories/GHSA-x27w-589x-frm2. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla!. Rated critical severity (CVSS 9.8), this vulnerabi
Astro is a web framework for content-driven websites. Rated high severity (CVSS 7.8), this vulnerability is remotely exp
Astro is a web framework. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication
Astro is a web framework for content-driven websites. Rated medium severity (CVSS 6.9), this vulnerability is remotely e
Astro is a web framework. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authenticatio
Astro is a web framework for content-driven websites. Rated medium severity (CVSS 5.5), this vulnerability is remotely e
Reflected XSS in Astro's server-side View Transition CSS generator affects all server-rendered or on-demand Astro applic
Authentication/authorization bypass in Clerk's official JavaScript SDKs (@clerk/nextjs, @clerk/nuxt, @clerk/astro, and t
Authorization bypass in the Astro web framework version 6.4.7 lets remote unauthenticated attackers reach protected rout
Regex metacharacter injection in @astrojs/netlify prior to 8.1.2 causes the Netlify Image CDN allowlist to be broader th
Sentry-Javascript is official Sentry SDKs for JavaScript. Rated high severity (CVSS 7.5), this vulnerability is remotely
The @astrojs/vercel serverless adapter in Astro versions prior to 10.0.2 contains an unauthenticated path traversal vuln
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today