CVE-2026-100409

{
  "etk_id": "ETK-2026-1711",
  "cve_id": "CVE-2026-100409",
  "display_id": "CVE-2026-100409",
  "ghsa_id": "GHSA-2vc4-c4r6-p6v6",
  "euvd_id": "EUVD-2026-102200",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authorization bypass in opennextjs-cloudflare cache handling",
  "summary": "opennextjs-cloudflare versions from 0.3.0 through versions before 1.20.2 can return cached protected content without authorization. An unauthenticated attacker may exploit inconsistent handling of encoded request paths when cache interception is enabled, middleware enforces access control, and a protected route has a matching cached response.",
  "mitigation": "Upgrade opennextjs-cloudflare to version 1.20.2 or later. Until upgrades are complete, disable enableCacheInterception or prevent protected routes from being cached.",
  "vendor": "opennextjs",
  "product": "opennextjs-cloudflare",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0.3.0, < 1.20.2"
      ],
      "ecosystem": "npm",
      "fixed_versions": [
        "1.20.2"
      ],
      "package_name": "@opennextjs/cloudflare",
      "purl": "pkg:npm/@opennextjs/cloudflare"
    }
  ],
  "cwes": [
    177
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss_score": 0.0031,
  "epss_percentile": 0.2192,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "mechanism_verified",
  "exploit": false,
  "pipeline_minutes": 30.514746883333334,
  "t0_at": "2026-10-15T16:57:50.999000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-15T19:41:44.518533+00:00",
      "days": 0.1138138834837963,
      "is_lower_bound": false,
      "measured_at": "2026-10-15T16:57:50.999000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-15T16:57:50.999000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-15T16:57:50.999000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-100409"
    }
  }
}