https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 10:25:48 +0000 https://db.gcve.eu/vuln/cve-2026-53632 <p><strong>Affected:</strong> vitejs launch-editor, vitejs vite, vitejs vite-plus</p> <p>launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking. This vulnerability is fixed in 2.14.1.</p> <p><strong>Affected:</strong> vitejs launch-editor, vitejs vite, vitejs vite-plus</p> <p>launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking. This vulnerability is fixed in 2.14.1.</p> https://db.gcve.eu/vuln/cve-2026-53632 https://db.gcve.eu/vuln/ghsa-v6wh-96g9-6wx3 <p><strong>Affected:</strong> npm: launch-editor, npm: vite, npm: vite-plus</p> <p>### Summary The `launch-editor` NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking.</p> <p>### Impact</p> <p>If the following conditions are met, an attacker can get the NTLMv2 password hash on the computer that is using the `launch-editor`:</p> <p>- using Windows - NTLM is not disabled ([it is recommended to disable](https://techcommunity.microsoft.com/blog/windows-itpro-blog/advancing-windows-security-disabling-ntlm-by-default/4489526), while it&#39;s still enabled by default) - the user accesses the attackers website that sends request to a middleware using `launch-editor` - the server that has the middleware using `launch-editor` is running - the attacker knows the URL for that server and the middleware</p> <p>This would be a problem if the user password is too simple that it can be identified through offline hash cracking, potentially leading to further compromise of developer accounts or internal systems.</p> <p>### Details `launch-editor` accepts file paths without validating or restricting Windows UNC paths such as:</p> <p>``` \\attacker-host\share ```</p> <p>On Windows systems, accessing a UNC path triggers an automatic NTLM authentication attempt to the remote SMB server. No user interaction or warning is required for this authentication at…</p> <p><strong>Affected:</strong> npm: launch-editor, npm: vite, npm: vite-plus</p> <p>### Summary The `launch-editor` NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user’s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking.</p> <p>### Impact</p> <p>If the following conditions are met, an attacker can get the NTLMv2 password hash on the computer that is using the `launch-editor`:</p> <p>- using Windows - NTLM is not disabled ([it is recommended to disable](https://techcommunity.microsoft.com/blog/windows-itpro-blog/advancing-windows-security-disabling-ntlm-by-default/4489526), while it&#39;s still enabled by default) - the user accesses the attackers website that sends request to a middleware using `launch-editor` - the server that has the middleware using `launch-editor` is running - the attacker knows the URL for that server and the middleware</p> <p>This would be a problem if the user password is too simple that it can be identified through offline hash cracking, potentially leading to further compromise of developer accounts or internal systems.</p> <p>### Details `launch-editor` accepts file paths without validating or restricting Windows UNC paths such as:</p> <p>``` \\attacker-host\share ```</p> <p>On Windows systems, accessing a UNC path triggers an automatic NTLM authentication attempt to the remote SMB server. No user interaction or warning is required for this authentication at…</p> https://db.gcve.eu/vuln/ghsa-v6wh-96g9-6wx3