Astro is a web framework. Prior to version 10.0.2, the @astrojs/vercel serverless entrypoint reads the x-astro-path header and xastropath query parameter to rewrite the internal request path, with no authentication whatsoever. On deployments without Edge Middleware, this lets anyone bypass Vercel's platform-level path restrictions entirely. The override preserves the original HTTP method and body, so this isn't limited to GET. POST, PUT, DELETE all land on the rewritten path. A Firewall rule blocking /admin/* does nothing when the request comes in as POST /api/health?xastropath=/admin/delete-user. This issue has been patched in version 10.0.2.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33768.json",
"cwe_ids": [
"CWE-441",
"CWE-862"
],
"cna_assigner": "GitHub_M"
}{
"cpe": "cpe:2.3:a:astro:\\@astrojs\\/vercel:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "10.0.2"
}
],
"source": [
"CPE_RANGE",
"REFERENCES"
]
}