CVE-2026-71316CWE-524CWE-862broken-access-control

CVE-2026-71316

High · published August 6, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
42.4
In the wild
Unconfirmed
What it is

Nuxt is an open-source web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cache:nuxt:payload entries for /<page>/_payload.json can be returned before route middleware and page guards because import.meta.prerender is not enforced, disclosing another user's SSR data. This issue is fixed in 4.5.1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.4th percentile
Weaknesses
CWE-524 · Use of Cache Containing Sensitive Information; CWE-862 · Missing Authorization
Published
2026-08-06T02:17Z
References (3)
https://github.com/nuxt/nuxt/commit/ac9b41a36b62296a117862254ee7d2b21a2a5203 · [email protected]https://github.com/nuxt/nuxt/releases/tag/v4.5.1 · [email protected]https://github.com/nuxt/nuxt/security/advisories/GHSA-wm8w-6qjm-cv43 · [email protected]
EPSS history
Timeline
  • 05 AUG 21:14Z
    Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients
    cvelistv5