CVE-2026-85152 | OpenJS Foundation Undici up to 8.10.1 Cache cross-domain policy

A vulnerability was found in OpenJS Foundation Undici up to 8.10.1. It has been rated as problematic. This affects an unknown function of the component Cache. The manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is uniquely identified as CVE-2026-85152. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More