CVE-2026-42043 - Vulnerability Analysis
HighCVSS: 7.2Last Updated: April 27, 2026
Axios - Bypass Protection
Published: April 24, 2026Updated: April 27, 2026PoC AvailableRemote Exploitable
Overview
Axios < 1.15.1 and < 0.31.1 contains a bypass of NO_PROXY protection caused by incomplete validation of 127.0.0.0/8 range addresses, letting attackers bypass proxy restrictions, exploit requires attacker to influence target URL.
Severity & Score
Severity: High
CVSS Score: 7.2
Impact
Attackers can bypass NO_PROXY restrictions, potentially accessing internal network resources or sensitive data.
Mitigation
Update to version 1.15.1 or 0.31.1 or later.
Related Resources
Details
- CVE ID
- CVE-2026-42043
- Severity
- High
- CVSS Score
- 7.2
- Type
- undefined
- Status
- confirmed
CWE
- CWE-183
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N