{"uuid": "e42d8265-0755-4c88-98e8-4dec55cad306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53721", "type": "seen", "source": "https://gist.github.com/alon710/75a8da6231b4389c07987c60b53a1e91", "content": "# CVE-2026-71315: CVE-2026-71315: Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-08-05\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71315\n\n## Summary\nAn security bypass vulnerability exists in Nuxt frameworks where route rules containing mixed-case characters are silently dropped during case-insensitive routing. This occurs because lookups are folded to lowercase, but keys are stored in their original casing in the route-matching trie. As a result, critical authorization middleware, such as appMiddleware, is bypassed, allowing unauthorized access to restricted pages.\n\n## TL;DR\nNuxt route rules are silently bypassed for mixed-case paths due to a key-matching case mismatch, allowing unauthenticated attackers to skip authorization checks.\n\n## Technical Details\n\n- **CWE ID**: CWE-178 / CWE-863\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity**: 8.2 (High)\n- **Exploit Status**: No public PoC or active exploitation\n- **Impact**: Authorization Bypass & Data Disclosure\n- **Vulnerable Component**: Nuxt Route Rules Matcher\n\n## Affected Systems\n\n- Nuxt Framework\n- **Nuxt**: >= 3.21.7, < 3.21.10 (Fixed in: `3.21.10`)\n- **Nuxt**: >= 4.4.7, < 4.5.1 (Fixed in: `4.5.1`)\n\n## Mitigation\n\n- Upgrade Nuxt framework\n- Normalize routeRules to lowercase\n- Enable router.options.sensitive\n- Implement component-level auth guards\n\n**Remediation Steps:**\n1. Identify administrative or sensitive routes protected via routeRules.\n2. Update Nuxt dependency in package.json to ^3.21.10 or ^4.5.1.\n3. Verify and convert existing routeRules keys to lowercase as a defense-in-depth measure.\n4. Run npm install or yarn install to apply the framework updates.\n\n## References\n\n- [GitHub Security Advisory GHSA-hxvh-4h3w-prp9](https://github.com/nuxt/nuxt/security/advisories/GHSA-hxvh-4h3w-prp9)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71315) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T05:31:22.251164Z"}