CVE-2026-119201 | Nuxt up to 4.6.2 Dev Server .nuxt/app-secret deriveSecret information disclosure

October 29, 2026 Yanac

A vulnerability classified as problematic has been found in Nuxt up to 4.6.2. Impacted is the function deriveSecret of the file .nuxt/app-secret of the component Dev Server. Performing a manipulation results in information disclosure.

This vulnerability was named CVE-2026-119201. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More