CVE-2026-71316 HIGH

CVE-2026-71316: Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

Vendor Nuxt

Product nuxt

Weakness CWE-524

Published August 5, 2026

Last update August 6, 2026

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Nuxt is an open-source web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cache:nuxt:payload entries for /<page>/_payload.json can be returned before route middleware and page guards because import.meta.prerender is not enforced, disclosing another user's SSR data. This issue is fixed in 4.5.1.

Key dates

02Disclosure timeline

August 5, 2026 CVE published

August 6, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-71316 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/524.html AskarLabs — CWE-524 write-up Use of Cache Containing Sensitive Information

Related vulnerabilities

CVE-2026-71316: Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

01Description

02Disclosure timeline

03References

04Related CVE