GHSA-c9cv-mq2m-ppp3: Nuxt: URL-handling weaknesses in `navigateTo` and `reloadNuxtApp`: SSR open redirect, client-side script execution via the `open` option, and protocol-relative bypass in `reloadNuxtApp`

Summary

GHSA-c9cv-mq2m-ppp3 describes three URL-handling weaknesses in Nuxt's `navigateTo` and `reloadNuxtApp` APIs. A path-normalisation bypass lets inputs such as `/..//evil.com` become protocol-relative redirects in SSR responses, and `navigateTo({ open })` and `reloadNuxtApp({ path })` can run script URLs or redirect cross-origin.

Mitigation

Fixed in `nuxt@4.4.7` and backported to `nuxt@3.21.7`, with separate commits for each of the three sinks. Workarounds for the first sink: validate redirect targets before `navigateTo`, for example by rejecting input where `new URL(target, 'http://localhost').pathname` starts with `//`, or by accepting only an allow-list of paths. For the second sink, reject user-controlled URLs whose protocol is not in an allow-list, typically just `http:` and `https:`.

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online