Vulnerability · Published Mar 24, 2026 · Assigned by GitHub_M

CVE-2026-33768Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`

Medium 6.5

In plain English

A medium-severity missing authorization in astro from withastro. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.3%top 72.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Astro is a web framework. Prior to version 10.0.2, the @astrojs/vercel serverless entrypoint reads the x-astro-path header and x_astro_path query parameter to rewrite the internal request path, with no authentication whatsoever. On deployments without Edge Middleware, this lets anyone bypass Vercel's platform-level path restrictions entirely. The override preserves the original HTTP method and body, so this isn't limited to GET. POST, PUT, DELETE all land on the rewritten path. A Firewall rule blocking /admin/* does nothing when the request comes in as POST /api/health?x_astro_path=/admin/delete-user. This issue has been patched in version 10.0.2.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	@astrojs/vercel	10.0.2	GHSA-mr6q-rp88-fx84

Affected products (as reported)

Vendor	Product	Versions
withastro	astro	< 10.0.2

Weakness: CWE-441, CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References

https://github.com/withastro/astro/security/advisories/GHSA-mr6q-rp88-fx84 x_refsource_CONFIRM
https://github.com/withastro/astro/pull/15959 x_refsource_MISC
https://github.com/withastro/astro/commit/335a204161f5a7293c128db570901d4f8639c6ed x_refsource_MISC
https://github.com/withastro/astro/releases/tag/%40astrojs%2Fvercel%4010.0.2 x_refsource_MISC