PT-2026-3452 · Fastify+1 · Fastify+1
Rootxharsh
·
Publicado
2026-01-19
·
Atualizado
2026-01-20
·
CVE-2026-22037
CVSS v3.1
8.4
Alta
| Vetor | AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
@fastify/express versions prior to 4.0.3
Description
A security issue exists in the @fastify/express plugin, which provides Express compatibility for Fastify. The problem occurs when middleware is registered with a specific path prefix. Attackers can bypass the middleware by using URL-encoded characters in the request path, such as
/%61dmin instead of /admin. The Fastify router correctly decodes the path and matches the route handler, allowing access to protected endpoints without the intended middleware restrictions. This bypass is due to how @fastify/express matches requests against registered middleware paths.Recommendations
Update to @fastify/express version 4.0.3 or later.
Exploit
Correção
Authentication Bypass Using an Alternate Path or Channel
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Fastify-Express
Fastify