CVE-2026-103918— @orpc/zod: Prototype injection in smart coercion
Quick assessment
Affected
middleapi orpc
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
oRPC 是一个用于构建端到端类型安全且符合 OpenAPI 标准的 API 的工具。在 1.14.10 版本之前，@orpc/zod 中的 ZodSmartCoercionPlugin 和 experimental_ZodSmartCoercionPlugin 插件会以纯对象形式收集对象和记录（record）属性，并通过原型链解析形状（shape）的键名。如果远程客户端能够访问具有对象或记录类型输入的过程（procedure），它可以传入 __proto__ 来替换返回请求对象的原型，从而使攻击者控制的继承属性能
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-103918
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
@orpc/zod: Prototype injection in smart coercion
Source: CVE Program / CVE List V5
Vulnerability Description
oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.10, the @orpc/zod ZodSmartCoercionPlugin and experimental_ZodSmartCoercionPlugin collect object and record properties in plain objects and resolve shape keys through the prototype chain. A remote client that can reach a procedure with an object or record input can supply __proto__ to replace the prototype of the returned request object, allowing attacker-controlled inherited values to reach application lookups. For object schemas, keys such as constructor, toString, and __proto__ can instead resolve inherited members as Zod schemas and cause an unhandled TypeError before validation. The global Object.prototype, unrelated objects, other requests, and other users are not modified, and the availability effect is limited to crafted requests rather than persistent process-wide state. This issue is fixed in version 1.14.10.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-915
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-103918
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103918
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-103918 (2)
Vendor Advisories for CVE-2026-103918 (1)
Other References for CVE-2026-103918 (1)
-
🔗 Release v1.14.10 · middleapi/orpc · GitHub x_refsource_MISC
IV. Related Vulnerabilities
Same product: orpc
-
CVE-2026-103036
@orpc/json-schema: Prototype injection in smart coercion -
CVE-2026-77360
oRPC: Vary Header Injection in CORS Plugin leading to potent -
CVE-2026-33331
oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped J -
CVE-2026-28794
oRPC: Prototype Pollution in `@orpc/client` via `StandardRPC
Same vendor: middleapi
-
CVE-2026-103036
@orpc/json-schema: Prototype injection in smart coercion -
CVE-2026-77360
oRPC: Vary Header Injection in CORS Plugin leading to potent -
CVE-2026-33331
oRPC: Stored XSS in OpenAPI Reference Plugin via unescaped J -
CVE-2026-28794
oRPC: Prototype Pollution in `@orpc/client` via `StandardRPC
Same weakness: CWE-915
-
CVE-2026-103036
@orpc/json-schema: Prototype injection in smart coercion -
CVE-2026-104908
MISP Decaying Model Import Mass Assignment Allows Cross-Orga -
CVE-2026-103235
MISP Event Delegation Mass Assignment Allows Retargeting Del -
CVE-2026-93364
Bludit CMS 3.22.0 Mass Assignment Privilege Escalation via P -
CVE-2026-93477
Private action arguments can be set by user input on the bul
V. Comments for CVE-2026-103918
No comments yet