{"id":"CVE-2026-44372","sourceIdentifier":"security-advisories@github.com","published":"2026-05-13T21:16:47.890","lastModified":"2026-10-26T14:10:00.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could turn a redirect route rule using wildcards rewrite into a cross-host redirect by sliding an extra slash in after the rule prefix. This vulnerability is fixed in 3.0.260429-beta."},{"lang":"es","value":"Nitro es un kit de herramientas de servidor de próxima generación. Antes de 3.0.260429-beta, un atacante podría convertir una regla de ruta de redirección que utiliza la reescritura de comodines en una redirección entre hosts deslizando una barra adicional después del prefijo de la regla. Esta vulnerabilidad está corregida en 3.0.260429-beta."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"nitrojs","product":"nitro","versions":[{"version":"< 3.0.260429-beta","status":"affected"}]},{"vendor":"nitrojs","product":"nitropack","versions":[{"version":"< 2.13.4","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-14T15:46:57.649072Z","id":"CVE-2026-44372","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nitro:nitro:*:*:*:*:*:*:*:*","versionEndExcluding":"2.13.4","matchCriteriaId":"4184D77E-DD83-4720-ADE4-08D6DE54CFC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nitro:nitro:*:*:*:*:*:*:*:*","versionStartExcluding":"2.13.4","versionEndExcluding":"3.0.260429","matchCriteriaId":"B7044A13-4A34-453D-AEDD-537368D23865"}]}]}],"references":[{"url":"https://github.com/nitrojs/nitro/pull/4236","source":"security-advisories@github.com","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/nitrojs/nitro/releases/tag/v2.13.4","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/nitrojs/nitro/releases/tag/v3.0.260429-beta","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/nitrojs/nitro/security/advisories/GHSA-9phm-9p8f-hw5m","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}