Nuxt July 2026 security advisory
Nuxt released versions 4.5.1, 3.21.10, and DevTools 3.3.1 to address eight security vulnerabilities including a high-severity server-side remote code execution flaw. Vercel deployed WAF mitigations platform-wide before public disclosure, automatically protecting deployed applications, but users must still upgrade to patched versions for complete protection.
The team has released Nuxt 4.5.1 and 3.21.10, along with 3.3.1, to address eight security advisories, including a high-severity server-side remote code execution vulnerability.Nuxt@nuxt/devtools
Vercel received advance notice of the server-side remote code execution vulnerability, , and deployed platform-wide WAF mitigations before public disclosure.GHSA-9473-5f9j-94wq
Applications deployed on Vercel are automatically protected by these mitigations, with no configuration changes required. However, do not rely on them for full protection. Upgrading to a patched version is still required.
The WAF mitigations cover only direct exploitation of the server-side RCE. The remaining component-instantiation, caching, authorization, denial-of-service, and development-time vulnerabilities require upgrading Nuxt and Nuxt DevTools.
All Nuxt users should upgrade as soon as possible:
To upgrade, run:
This also refreshes the lockfile, pulling in the patched Nuxt DevTools version.
Users who previously upgraded for the earlier route rule advisory, CVE-2026-53721, must still upgrade. The newly disclosed authorization bypass is a regression in that earlier fix.
Nuxt 4 users who cache authenticated pages containing user-specific data should also follow Nuxt’s guidance and purge any upstream caches that may still contain payloads generated before the fix.
Vercel platform protections provide an additional layer of defense, but they are not a replacement for upgrading affected dependencies.
Read the for affected configurations and complete remediation guidance.Nuxt security announcement
Vulnerabilities addressed
Vercel platform protections
Recommended action
Vulnerability | Severity | Advisory |
|---|---|---|
Server-side remote code execution via server island props | High | |
Unauthorized component instantiation via server island props | Medium | |
Route rule authorization bypass | High | |
Server component denial of service | High | |
Cross-user disclosure of cached payloads, affecting Nuxt 4.x versions 4.4.0 and later | High | |
Development server path disclosure | Low | |
Remote code execution in Nuxt DevTools, development-only, fixed in 3.3.1 | Critical |
Nuxt 4: or later
4.5.1Nuxt 3: or later
3.21.10Nuxt DevTools: or later
3.3.1
Source: original entry ↗
More from Vercel
Follow Vercel to get its new changes in your feed and email digest.
OpenAI Decisions API now available on AI Gateway
OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.
Timestamp attributes now supported in Vercel Flags
Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.
Glyph Cluster now available in stealth on AI Gateway
Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.