onyx --cves cve-2026-100409
CVE-2026-100409
- score
- 0.7
- cvss
- 7.5
- epss
- 0.3%
- published
- 2026-10-15
- kev added
- —
- first seen
OpenNext Cloudflare 0.3.0 to 1.20.2 contains an authorization bypass caused by inconsistent processing of encoded pathnames between middleware and cache lookup, letting unauthenticated attackers access cached protected content, exploit requires enabled cache interception and matching cached protected routes.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 5
- https://github.com/opennextjs/opennextjs-cloudflare/releases/tag/@opennextjs/cloudflare@1.20.2
- https://github.com/opennextjs/opennextjs-cloudflare/security/advisories/GHSA-2vc4-c4r6-p6v6
- https://github.com/opennextjs/opennextjs-aws/pull/1199
- https://github.com/opennextjs/opennextjs-aws/pull/1200
- https://github.com/opennextjs/opennextjs-cloudflare/commit/38ea40b669be272ddf09a7df7e70c69d0b57404b