{"id":"CVE-2026-107701","published":"2026-10-08T19:17:02.403","lastModified":"2026-10-14T17:18:17.790","description":"dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set(). Attackers controlling the path, such as through user-supplied field names, can use __proto__ segments to inject properties into all objects, altering authorization flags and option defaults or crashing the process.","cvssScore":8.2,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","cwes":["CWE-1321"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/R3tro16/e094e4318a040f189fd5d2d33e8c3ec2","tags":[]},{"url":"https://github.com/ntharim/dot-access","tags":[]},{"url":"https://github.com/ntharim/dot-access/blob/v1.0.0/index.js#L9-L18","tags":[]},{"url":"https://github.com/ntharim/dot-access/issues/5","tags":[]},{"url":"https://www.vulncheck.com/advisories/dot-access-through-1.0.0-prototype-pollution-via-set-path-argument","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/R3tro16/e094e4318a040f189fd5d2d33e8c3ec2","tags":[]},{"url":"https://github.com/ntharim/dot-access","tags":[]},{"url":"https://github.com/ntharim/dot-access/blob/v1.0.0/index.js#L9-L18","tags":[]},{"url":"https://github.com/ntharim/dot-access/issues/5","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability allows attackers to pollute JavaScript object prototypes through crafted dotted paths, enabling them to inject properties into all objects and potentially alter authorization behavior or crash processes. This affects applications using the dot-access library version 1.0.0.","exploitability":"Exploitation is relatively straightforward for attackers who can control field names or input paths, requiring only a single crafted dotted path with __proto__ segments to modify Object.prototype.","blast_radius":"The impact could be significant across applications using this library, potentially affecting authorization controls, default configurations, and process stability if exploited at scale.","remediation":"Upgrade to dot-access version 1.0.1 or later to address the prototype pollution vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["prototype-pollution","javascript","config-injection"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:15:57.833Z"}}