CVE-2026-39364 Vite Dev Server File Access Bypass via Query Parameters - Confirmed File Disclosure

Arnold Chan@slaz

•updated 25 days ago•0•0•2

Detects an exploitation attempt against the Vite Development Server (CVE-2026-39364) where an attacker uses specific query parameters to bypass file access restrictions and disclose sensitive files. The rule triggers on GET requests containing suspicious import-related query parameters and checks the resulting response to ensure a successful 200/206 status code and non-HTML content type.