High-Severity Vulnerability in Vite Development Servers (CVE-2026-39364) Actively Exploited

The Cyber Security Agency of Singapore (CSA) has issued an alert regarding the active exploitation of a high-severity vulnerability (CVE-2026-39364) in Vite development servers. This flaw allows unauthenticated attackers to bypass security configurations and retrieve restricted system and configuration files over HTTP. Users are urged to update Vite to versions 7.3.2 or later, or 8.0.5 or later, immediately.