CVE-2026-67320: axios Node HTTP adapter proxy inheritance via interceptor cloning

CVE-2026-67320 · Severity: high · CVSS 7.5 · Published 2026-08-01

Axios is a widely-used HTTP client library for Node.js and browsers. A vulnerability in the Node.js HTTP adapter allows attackers who have polluted the global Object.prototype to intercept and redirect HTTP requests through an attacker-controlled proxy server. When request interceptors clone the configuration object, the protection against prototype pollution is bypassed, enabling the proxy to observe sensitive data like Authorization headers, request bodies, and other metadata—without requiring HTTPS protection.

Technologies: Axios. Vendors: Axios.

Quick answers

Is CVE-2026-67320 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-67320 being exploited in the wild.
How severe is CVE-2026-67320?
High severity, with a CVSS score of 7.5, published 1 August 2026.
Which products and versions are affected?
Axios >=0.31.1 <0.33.0, >=1.15.2 <1.18.0.
Is there a fix for CVE-2026-67320?
A patch was published on 2026-07-20: Patches available in axios >=0.33.0 and >=1.18.0 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-67320 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-67320?
Check whether you run Axios at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a prototype pollution bypass in axios' Node.js HTTP adapter. Axios initially hardens merged request config by creating a null-prototype object (lib/core/mergeConfig.js), but request interceptors run after this merge and may return a cloned config using patterns like {...config} or Object.assign({}, config), which converts it back to a normal prototype-inheriting object. The dispatch phase (lib/core/dispatchRequest.js) does not re-harden this object before passing it to the adapter. The Node HTTP adapter (lib/adapters/http.js) then reads config.proxy through the prototype chain, allowing an attacker who has polluted Object.prototype.proxy elsewhere in the process to redirect plaintext HTTP requests through an attacker-controlled proxy. The proxy can observe Authorization headers, Basic auth credentials, request method, absolute URL, Host header, and request body. HTTPS requests with normal TLS validation are not affected. Patches are available in versions >=0.33.0 and >=1.18.0.

Affected products

  • axios axios >=0.31.1 <0.33.0, >=1.15.2 <1.18.0

Identifiers

  • CVE-2026-67320
  • GHSA-gcfj-64vw-6mp9

Timeline

  • 2026-07-06: disclosed
  • 2026-07-20: advisory
  • 2026-07-20: patched: Patches available in axios >=0.33.0 and >=1.18.0

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.