CVE-2025-52662

Updated on 07 Nov 2025

Severity

6.9 Medium severity

Details

CVSS score
6.9
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Overview

About vulnerability

A vulnerability in Nuxt DevTools has been fixed in version 2.6.4*. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.

Details

Affected product:
devtools , nuxt
Affected packages:
@nuxt/devtools @ 1.7.0 (+18 more)