CVE-2026-84316

Summary

Nginx UI allows authenticated users to bypass configuration validation by placing restricted directives like 'load_module' or 'js_import' on the same line as benign directives, enabling arbitrary code execution in the Nginx worker context. This affects REST, nginx_config_modify, site, and stream write endpoints.

Exploitability

Exploitation requires authentication and is moderately difficult to execute, needing precise configuration of multiple directives on single lines to bypass validation checks.

Blast radius

The vulnerability can lead to full system compromise through code execution in the Nginx worker process, affecting all services served by the vulnerable Nginx instance.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.4.1 or later to fix the configuration validation bypass issue.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.