CVE-2026-114063
SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows
Using kit by sveltejs?
Get instant alerts when new vulnerabilities affect kit - before attackers find them.
Description
SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files outside the prerendered output directory. Attackers who can reach the preview server through network access or a tunnel can send crafted requests to expose source code, configuration, or credentials readable by the server process.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Remediation
VTDB RemediationFix available
VTDB RemediationAI-generated · claude-fable-5-1 · published by VulnTracker
Upgrade @sveltejs/kit to 3.0.0 (the vendor-stated unaffected version) on Windows machines that run vite preview, and stop exposing the preview server to the network or tunnels until then.
- 1
Find projects on @sveltejs/kit 2.10.0 up to but not including 3.0.0
Our affected entry records 2.10.0 and the CVE text extends this to every release from 2.10.0 before 3.0.0. Check package.json and lockfiles in each project, and note which developers or CI jobs run them on Windows, since the description limits the flaw to the vite preview server on Windows.
Affected: sveltejs-kit 2.10.0; description: "from 2.10.0 before 3.0.0 ... on Windows".
- 2
Upgrade to @sveltejs/kit 3.0.0
The vendor states 3.0.0 is not affected. Update the dependency and regenerate the lockfile; see the GitHub security advisory for any migration notes that accompany the major version change.
https://github.com/sveltejs/kit/security/advisories/GHSA-xgrj-p7pg-6vm3 - 3
Take the preview server off the network
The attack requires reaching the preview server over the network or through a tunnel. Until upgraded, bind vite preview to localhost only, close any tunnels (ngrok-style or similar) pointed at it, and do not use vite preview as a production or shared-staging server.
Description: attackers "who can reach the preview server through network access or a tunnel"; CVSS:3.1/AV:N/AC:L/PR:N/UI:N/C:H.
- 4
Rotate secrets readable by any exposed preview process
If a preview server on an affected version was reachable from outside the developer's machine, treat configuration files and credentials readable by that process (for example .env files) as exposed and rotate them.
Description: crafted requests can "expose source code, configuration, or credentials readable by the server process".
If you cannot apply the fix
Keep vite preview bound to localhost, remove tunnels to it, and run preview only on non-Windows hosts, since the description scopes the flaw to Windows. These are inferred from the stated attack conditions rather than a vendor-published mitigation.
The affected entry lists only 2.10.0, while the description covers all releases from 2.10.0 before 3.0.0; the broader range is from the CVE text, not our range data. The 3.0.0 fix is a vendor statement; whether a 2.x backport exists is not recorded, so projects that cannot take a major upgrade have no recorded fixed version. The Windows-only scope comes from the description and advisory title, not from a runs_on_platform entry. Exploitation is not recorded and no EPSS score is present.
Fixed in
Guidance updated 2026-10-21
References (2)
SSVC — Action Prioritization
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- NONE
- Availability
- NONE
Quick Info
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.