CVE-2026-110802
Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads plugin_sandbox_opts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript() in packages/altair-core/src/utils/inject.ts, which creates script elements in the page. The intended parent iframe flow places the page in an iframe with sandbox allow-scripts and without allow-same-origin, but direct navigation to a crafted iframe-sandbox URL omits that isolation and executes the supplied script in the origin serving Altair. Exploitation requires a victim to open the crafted URL, and the resulting script can access script-readable storage and make same-origin requests according to the deployment's authentication and cookie controls. This issue is fixed in version 8.5.8.
Fixes and workarounds
Fix
altair-static (npm): GitHub reports patched versions 8.5.8. Check the advisory for the affected release branch.
Source: GitHub GHSA-752m-7p75-49gfFix
altair-express-middleware (npm): GitHub reports patched versions 8.5.8. Check the advisory for the affected release branch.
Source: GitHub GHSA-752m-7p75-49gfFix
altair-koa-middleware (npm): GitHub reports patched versions 8.5.8. Check the advisory for the affected release branch.
Source: GitHub GHSA-752m-7p75-49gfFix
altair-fastify-plugin (npm): GitHub reports patched versions 8.5.8. Check the advisory for the affected release branch.
Source: GitHub GHSA-752m-7p75-49gfAffected products and versions
| Product | Versions | Authority |
|---|---|---|
| altair altair-graphql |
>= 7.2.4, < 8.5.8 (affected) | CNA: GitHub_M |
| altair-express-middleware altair-graphql |
>= 7.2.4, < 8.5.8 (affected) | CNA: GitHub_M |
| altair-fastify-plugin altair-graphql |
>= 7.2.4, < 8.5.8 (affected) | CNA: GitHub_M |
| altair-koa-middleware altair-graphql |
>= 7.2.4, < 8.5.8 (affected) | CNA: GitHub_M |
| altair-static altair-graphql |
>= 7.2.4, < 8.5.8 (affected) | CNA: GitHub_M |
altair-staticaltair-static
npm |
7.2.4 <=> 8.5.7 (affected, GitHub advisory range) | GitHub GHSA-752m-7p75-49gf |
altair-express-middlewarealtair-express-middleware
npm |
7.2.4 <=> 8.5.7 (affected, GitHub advisory range) | GitHub GHSA-752m-7p75-49gf |
altair-koa-middlewarealtair-koa-middleware
npm |
7.2.4 <=> 8.5.7 (affected, GitHub advisory range) | GitHub GHSA-752m-7p75-49gf |
altair-fastify-pluginaltair-fastify-plugin
npm |
7.2.4 <=> 8.5.7 (affected, GitHub advisory range) | GitHub GHSA-752m-7p75-49gf |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
| Version / score | Vector | Authority |
|---|---|---|
| 3.1 / 6.1 medium |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | CNA: GitHub_M |
| 3.1 / 6.1 medium |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | NVD: [email protected] |
Exploit evidence
- https://github.com/altair-graphql/altair/security/advisories/GHSA-752m-7p75-49gf
exploit · ADP: CISA-ADP
References
- https://github.com/altair-graphql/altair/security/advisories/GHSA-752m-7p75-49gfCNA: GitHub_M · x_refsource_CONFIRM
- https://github.com/altair-graphql/altair/commit/53a19183ce11ca147bb990c355e14ecb1dd7cd3eCNA: GitHub_M · x_refsource_MISC
- https://github.com/altair-graphql/altair/commit/bdf422bdaaaf3186170ba7f22e22c259072133d9CNA: GitHub_M · x_refsource_MISC
- https://github.com/altair-graphql/altair/releases/tag/v8.5.8CNA: GitHub_M · x_refsource_MISC
- https://github.com/altair-graphql/altair/security/advisories/GHSA-752m-7p75-49gfADP: CISA-ADP · exploit
- https://github.com/altair-graphql/altair/commit/53a19183ce11ca147bb990c355e14ecb1dd7cd3e[email protected]
- https://github.com/altair-graphql/altair/commit/bdf422bdaaaf3186170ba7f22e22c259072133d9[email protected]
- https://github.com/altair-graphql/altair/releases/tag/v8.5.8[email protected]
- https://github.com/altair-graphql/altair/security/advisories/GHSA-752m-7p75-49gf[email protected]
- https://github.com/altair-graphql/altair/security/advisories/GHSA-752m-7p75-49gf134c704f-9b21-4f2e-91b3-4a467353bcc0
- https://github.com/altair-graphql/altair/security/advisories/GHSA-752m-7p75-49gfGitHub Security Advisories · advisory
For agents and automation
Read public disclosures for free as Markdown or JSON. Compatible browsers also expose native WebMCP tools to search disclosures, read this page, and discover API access.
Use the ontology-linked Cyber API with x402 pay per request, or a Y2 Pro or Elite API key with the intel:cyber scope.
Endpoints and access details
https://api.y2.dev/api/v2/cyber/cveshttps://api.y2.dev/api/v2/cyber/cves/{cveId}
A workspace owner or admin can create a Pro or Elite API key. Send Authorization: Bearer <Y2_API_KEY> from your trusted agent runtime.
For x402, omit Authorization and read the HTTP 402 payment challenge before signing a retry. Public browser tools do not make payments.