CVE-2025-52662
- CVSS
- —
- EPSS
- 0.002 (13.0th percentile)
- CISA KEV
- Not listed
- Exploitation
- No report
- Public exploits
- None seen
- State
- Unknown
Coverage
Vercel (blog + changelog)
CVE-2025-52662: XSS on Nuxt DevTools
security vulnerability A medium-severityin Nuxt DevTools was responsibly disclosed, and has been fixed for version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. Nuxt DevTools users are encouraged to upgrade to the latest version. Read more…
What we observed
No signals recorded