MSRXMSRXSecurity
Vendors / Vite

Vite vulnerabilities being exploited

1 Vite flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Vitejs. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-01-22CVE-2025-31125 Vitejs
Vite Vitejs Improper Access Control Vulnerability

Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network (using --host or server.host config option) are affected.

2026-02-12
Watch my Vite softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.