CVE-2026-102527: Nuxt OG Image Cache Poisoning Vulnerability
Summary
CVE-2026-102527: Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes. Affects nuxt-og-image versions >= 6.2.5, < 6.7.0. Fixed in 6.7.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Nuxt OG Image is a module designed for generating Open Graph images for Nuxt.js applications. It allows developers to create dynamic images based on various parameters, enhancing the sharing experience on social media platforms. However, the module's caching mechanism has a vulnerability that can be exploited by attackers to manipulate the content of the generated images.
Vulnerability Detail
The vulnerability arises from the way cache keys are generated for dynamic image routes in the Nuxt OG Image module. An unauthenticated attacker can exploit this flaw to alter the content of the images delivered to users, leading to content spoofing. The issue is rooted in the handling of parameters during image generation, which allows attackers to derive cache keys and potentially serve malicious content.
How To Fix
Minimum fixed version
6.7.0
This is the first release that contains the fix.
npm install nuxt-og-image@6.7.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can implement additional validation on the parameters used for generating images to prevent unauthorized modifications. However, the best solution is to upgrade to the patched version.
Conclusion
The Nuxt OG Image cache poisoning vulnerability (CVE-2026-102527) poses a significant risk to applications using this module. By understanding the nature of the vulnerability and following the recommended steps to upgrade, developers can protect their applications from potential exploitation.
See every vulnerability recorded for nuxt-og-image →
FAQ
The vulnerability allows attackers to spoof content in Open Graph images, potentially misleading users and damaging the reputation of the affected application.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score for this vulnerability is 6.9, indicating a moderate severity level.
While upgrading is the best solution, you can implement additional validation on image generation parameters as a temporary workaround.
The vulnerability was discovered by Dmitry Vanin from Positive Technologies.
References
Related vulnerabilities
Recent vulnerabilities recorded for nuxt-og-image.
