// AWSHIGH
CVE-2026-39364 in Vite development servers enables unauthenticated file-read access. Attackers are actively scanning exposed Vite servers to extract AWS credentials, Azure tokens, and infrastructure data from .env files and deployment artifacts. Honeynet recorded over 807 session-grouped attacks in August 2026. Affected Vite versions 7.1.0–7.3.2 and 8.0.5; attackers use query-parameter bypasses to circumvent file-access restrictions.
- Mass Scanning Targets Exposed Vite Servers to Steal AWS Keys and(opens in a new tab)
- Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Crede(opens in a new tab)
// Get alerts for AWS