Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-85152— undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors

Quick assessment

Affected
undici undici
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Undici 8.10.0 在缓存键和请求去重键中遗漏了目标源（origin）。当缓存或去重拦截器直接组合到 或 上时，内部缓存键会回退为空源字符串。这意味着，只要 HTTP 方法、路径和相关请求头匹配，来自某个上游源的可缓存响应或正在处理中的响应可能会被错误地返回给指向另一个受信任源（trusted origin）的请求，从而导致跨源信息泄露和持久性缓存投毒。 报告者演示了一个完整的认证绕过场景：一个由攻击者控制的密钥签名的 JWT 被误认为属于受信任的发行方，而受信任的源从未被实际联系到。 此问题是一个在 8.

CVSS 7.4 · High

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 2

VendorProduct Version RangeStatus
undici undici 8.10.0< 8.10.2 affected
8.10.2 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-85152

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors
Source: CVE Program / CVE List V5
Vulnerability Description
undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool. Because the internal cache key falls back to an empty origin string, a cacheable or in-flight response from one upstream origin is returned for a request to a different, trusted origin whenever the method, path, and relevant headers match, which permits cross-origin information disclosure and persistent cache poisoning. The reporter demonstrated a full authentication bypass in which a JWT signed with an attacker-controlled key was accepted as belonging to a trusted issuer, and the trusted origin was never contacted. This is a regression introduced in 8.10.0 and affects undici versions from 8.10.0 up to 8.10.2. Applications using an Agent, which carries the origin in its dispatch options, are not affected. Users should upgrade to undici 8.10.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
undici undici 8.10.0 ~ 8.10.2 -

II. Public POCs for CVE-2026-85152

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-85152

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-85152 (1)

Same Patch Batch · undici · 2026-09-04 · 11 CVEs total

CVE-2026-19534 7.5 HIGH undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
CVE-2026-84961 7.4 HIGH undici vulnerable to TLS certificate validation bypass via dropped connect options in Bala
CVE-2026-84933 6.5 MEDIUM undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches
CVE-2026-85024 5.9 MEDIUM undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate
CVE-2026-85014 5.9 MEDIUM undici vulnerable to Denial of Service via WebSocketStream unclean close
CVE-2026-18149 5.9 MEDIUM undici vulnerable to Denial of Service via orphaned RetryHandler response body
CVE-2026-84890 5.9 MEDIUM undici vulnerable to Denial of Service via unbounded decompression of compressed responses
CVE-2026-85008 3.7 LOW undici vulnerable to caching and replay of unsafe HTTP method responses
CVE-2026-84947 3.7 LOW undici vulnerable to response truncation via oversized chunked responses in the dump inter
CVE-2026-18540 3.7 LOW undici vulnerable to downstream response splitting via retry interceptor

IV. Related Vulnerabilities

Same product: undici
Same vendor: undici
Same weakness: CWE-346

V. Comments for CVE-2026-85152

No comments yet

Leave a comment