Server-Side Open Redirect Vulnerability in Nuxt by Nuxt.js

CVE-2026-56326

What is CVE-2026-56326?

Nuxt versions prior to 4.4.7 and 3.21.7 are susceptible to a server-side open redirect vulnerability in the navigateTo function. This issue arises from inadequate validation of path-normalized payloads, allowing attackers to manipulate redirect paths through constructs such as /..//evil.com and /.//evil.com. By exploiting this vulnerability, attackers can bypass external-host checks and redirect users to malicious sites via the Location header or meta-refresh tactics, potentially leading to phishing attacks and unauthorized access to OAuth authorization codes.

References