{"id":7325,"date":"2026-04-17T09:10:51","date_gmt":"2026-04-17T06:10:51","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=announcement&#038;p=7325"},"modified":"2026-10-19T13:11:35","modified_gmt":"2026-10-19T10:11:35","slug":"cve-2026-40175-for-axios-javascript-library","status":"publish","type":"announcement","link":"https:\/\/support.withsecure.com\/fr\/announcements\/cve-2026-40175-for-axios-javascript-library\/","title":{"rendered":"CVE-2026-40175 for Axios JavaScript library"},"content":{"rendered":"<h2 data-id=\"what-is-axios\"><strong>What is Axios?<\/strong><\/h2>\n<p>Axios is a JavaScript library intended to ease interaction with internet HTTP services. It is used by some organizations to simplify their codebase compared to using standard browser functionality.<\/p>\n<h2 data-id=\"what-is-the-vulnerability\"><strong>What is the vulnerability?<\/strong><\/h2>\n<p>Prior to version 1.15.0, the Axios library is vulnerable to a specific \u00ab\u00a0Gadget\u00a0\u00bb attack chain that allows Prototype Pollution in any third-party dependency to be escalated into Remote Code Execution (RCE) or Full Cloud Compromise (via AWS IMDSv2 bypass).<\/p>\n<p>Ref:\u00a0<a href=\"https:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fnvd.nist.gov%2Fvuln%2Fdetail%2FCVE-2026-40175\" target=\"_blank\" rel=\"nofollow noopener ugc\">https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-40175<\/a><\/p>\n<h2 data-id=\"has-the-vulnerability-been-fixed\"><strong>Has the vulnerability been fixed?<\/strong><\/h2>\n<p>This vulnerability has been fixed in 1.15.0.<\/p>\n<p>You can read more about how WithSecure has responded to this, and what steps you should take if you are using Axios,<a href=\"https:\/\/community.withsecure.com\/announcements-en\/kb\/articles\/32898-cve-2026-40175-for-axios-javascript-library\" rel=\"nofollow noopener ugc\" target=\"_blank\"> over in our dedicated article<\/a>. Please note that any future updates we make related to this Axios vulnerability will be made on that article.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>What is Axios? Axios is a JavaScript library intended to ease interaction with internet HTTP services. It is used by some organizations to simplify their codebase compared to using standard&hellip;<\/p>\n","protected":false},"template":"","announcement_category":[142],"class_list":["post-7325","announcement","type-announcement","status-publish","hentry"],"acf":{"source_system":"vanilla-import","import_hash":"0d31f31b010018a1c82571248576199c8466af82","vanilla_article_id":32899,"legacy_author":"AndyF_WS","vanilla_url":"https:\/\/community.withsecure.com\/announcements-en\/kb\/articles\/32899-cve-2026-40175-for-axios-javascript-library","vanilla_category_id":142,"machine_translated":false},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/announcement\/7325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/announcement"}],"about":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/types\/announcement"}],"version-history":[{"count":1,"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/announcement\/7325\/revisions"}],"predecessor-version":[{"id":8860,"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/announcement\/7325\/revisions\/8860"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/media?parent=7325"}],"wp:term":[{"taxonomy":"announcement_category","embeddable":true,"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/announcement_category?post=7325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}