Vite server.fs.deny Bypass via NTFS Short Paths (CVE-2026-89971) POC

github.com 2026-06-27查看中文 →

Security AdvisoryCVE-2026-89971HighVite

Affected:

vite >=8.0.0, <=8.0.15
vite-plus >=7.0.0, <=7.3.4
vite-plus <=6.4.2
vite-plus <=0.1.23

Fixed in:

vite 8.0.16
vite-plus 7.3.5
vite-plus 6.4.3
vite-plus 0.1.24

Referenced CVEs: CVE-2026-53571

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

FOSSBilling Pre-Auth Bypass in Multiple API Endpoints Reading Sensitive Data 2026-07-07 FOSSBilling Cart Race Condition Vulnerability Leading to Coupon Abuse 2026-07-07 Coolify Unauthenticated Feedback Endpoint Abuse (No Auth/Rate Limit) 2026-07-07 DoS Vulnerability in /api/feedback Endpoint: Validation and Rate Limiting Fix 2026-07-07 GHSA-chg4-63hm-v9x: Coolify Authenticated RCE via Regression in SHELL_SAFE_COMMAND_PATTERN 2026-07-07

Offline Archive

Offline screenshot & PDF are Pro-exclusive