CVE-2026-119198 | Nuxt up to 4.6.2 HMR Socket path traversal

October 29, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Nuxt up to 4.6.2. Affected by this vulnerability is an unknown functionality of the component HMR Socket. Executing a manipulation can lead to path traversal.

This vulnerability appears as CVE-2026-119198. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More