CVE-2026-112945 | Vitejs Vite up to 8.3.2 Transform Index Html getHtmlFilename url path traversal

October 20, 2026 Yanac

A vulnerability categorized as critical has been discovered in Vitejs Vite up to 6.4.3/7.3.6/8.1.5/8.2.3/8.3.2. Affected is the function getHtmlFilename of the component Transform Index Html. The manipulation of the argument url results in path traversal.

This vulnerability is known as CVE-2026-112945. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More