Information Disclosure via Flags override link
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-200.
Summary
Flags SDK is an open-source feature flags toolkit for Next.js and SvelteKit. Impacted versions include flags from 3.2.0 and prior and @vercel/flags from 3.1.1 and prior as certain circumstances allows a bad actor with detailed knowledge of the vulnerability to list all flags returned by the flags discovery endpoint (.well-known/vercel/flags). This vulnerability allows for information disclosure, where a bad actor could gain access to a list of all feature flags exposed through the flags discovery endpoint, including the flag names, flag descriptions, available options and their labels (e.g. true, false), and default flag values. This issue has been patched in [email protected], users of flags and @vercel/flags should also migrate to [email protected].
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| vercel | flags | before 4.0.0 | 4.0.0 | Patch available | CNA |
| — | flags (npm) | before 4.0.0 | 4.0.0 | Patch available | GHSA-892p-pqrr-hxqr |
| — | @vercel/flags (npm) | up to 3.1.1 | — | No fix listed | GHSA-892p-pqrr-hxqr |
- flags Vendorvercel Affected before 4.0.0 Fixed in 4.0.0 Patch available CNA
- flags (npm) Vendor— Affected before 4.0.0 Fixed in 4.0.0 Patch available GHSA-892p-pqrr-hxqr
- @vercel/flags (npm) Vendor— Affected up to 3.1.1 Fixed in — No fix listed GHSA-892p-pqrr-hxqr
Remediation
- Fix · CNA flags (vercel) Fixed in 4.0.0
- Fix · GHSA-892p-pqrr-hxqr flags (npm) Fixed in 4.0.0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2025-46332
- 2026-10-03 Alias added: GHSA-892p-pqrr-hxqr
References
More vercel vulnerabilities
- TI-2025-34861 Deserialization of untrusted data in Meta react-server-dom-webpack KEVCVSS 3.1CRITICAL 10.0
- TI-2025-21309 Authorization Bypass in Next.js Middleware CVSS 3.1CRITICAL 9.1
- TI-2024-15745 An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute… CVSS 3.1CRITICAL 9.8
- TI-2025-34863 Deserialization of untrusted data in Meta react-server-dom-webpack CVSS 3.1HIGH 7.5
- TI-2024-31371 Cache Poisoning in next.js CVSS 3.1HIGH 7.5
- TI-2023-24914 Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch… CVSS 3.1HIGH 7.5
Sources
- CVE-2025-46332 · CVE Program
- CVE-2025-46332 · NVD
- FIRST EPSS
- GHSA-892p-pqrr-hxqr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences