{"id":"CVE-2026-103922","aliases":["EUVD-2026-90973","GHSA-rvm3-566m-v7fv"],"status":"published","title":"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path","description":"Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame to /_capacitor_http_interceptor_. The native proxy can fetch an attacker-selected URL and return the response as a document at the application's own origin, allowing script in that response to access same-origin storage, cookies, and registered Capacitor plugin capabilities. Applications remain affected when CapacitorHttp is disabled because affected releases serve the proxy path regardless of that setting. This issue is fixed in versions 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1.","severity":{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0034,"percentile":0.27804,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-346","CWE-441"],"published":"2026-10-01T17:27:05Z","modified":"2026-10-28T11:03:36Z","exploits":[{"source":"pocgithub","id":"techupdate24/capacitor-flaw-cve-2026-103922","title":"techupdate24/capacitor-flaw-cve-2026-103922","date":"2026-10-02","url":"https://github.com/techupdate24/capacitor-flaw-cve-2026-103922"}],"fixes":[{"ecosystem":"npm","package":"@capacitor/android","fixed_in":["6.2.2","7.6.9","8.5.1","8.4.3"],"sources":["ghsa","osv"]},{"ecosystem":"npm","package":"@capacitor/ios","fixed_in":["6.2.2","7.6.9","8.5.1","8.4.3"],"sources":["ghsa","osv"]},{"ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","fixed_in":["6.2.2","7.6.9","8.5.1","8.4.3"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"com.capacitorjs:core","fixed_in":["6.2.2","7.6.9","8.5.1","8.4.3"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}]},{"source":"ghsa","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}]},{"source":"ghsa","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}]},{"source":"ghsa","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}]},{"source":"ghsa","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}]},{"source":"ghsa","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}]},{"source":"ghsa","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}]},{"source":"osv","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}]},{"source":"osv","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}]},{"source":"osv","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}]},{"source":"osv","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}]},{"source":"osv","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.2.2"}]}],"versions":["6.0.0","6.1.0","6.1.1","6.1.2","6.2.0","6.2.1"]},{"source":"osv","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.6.9"}]}],"versions":["7.0.0","7.0.1","7.1.0","7.2.0","7.3.0","7.4.0","7.4.2","7.4.3","7.4.4","7.4.5","7.5.0","7.6.0","7.6.1","7.6.2","7.6.3","7.6.4","7.6.5","7.6.6","7.6.7","7.6.8"]},{"source":"osv","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"SEMVER","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}]},{"source":"osv","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"SEMVER","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}]},{"source":"osv","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"SEMVER","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.5.0"},{"fixed":"8.5.1"}]}],"versions":["8.5.0"]},{"source":"osv","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}],"versions":["8.4.0","8.4.1","8.4.2"]},{"source":"osv","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"SEMVER","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}]},{"source":"osv","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"SEMVER","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}]},{"source":"osv","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"SEMVER","events":[{"introduced":"8.3.5"},{"fixed":"8.4.3"}]}]},{"source":"osv","ecosystem":"SwiftURL","package":"github.com/ionic-team/capacitor-swift-pm","ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.capacitorjs:core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}],"versions":["8.0.0","8.0.1","8.0.2","8.1.0","8.2.0","8.3.0","8.3.1","8.3.2","8.3.3","8.3.4"]},{"source":"osv","ecosystem":"npm","package":"@capacitor/android","ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}]},{"source":"osv","ecosystem":"npm","package":"@capacitor/ios","ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"last_affected":"8.3.4"}]}]}],"products":[{"vendor":"@capacitor","product":"android"},{"vendor":"@capacitor","product":"ios"},{"vendor":"cisco","product":"ios"},{"vendor":"com.capacitorjs","product":"core"},{"vendor":"google","product":"android"},{"vendor":"ionic-team","product":"capacitor"},{"vendor":"opnsense","product":"core"},{"vendor":"swift","product":"github.com/ionic-team/capacitor-swift-pm"}],"references":[{"url":"https://github.com/ionic-team/capacitor/security/advisories/GHSA-rvm3-566m-v7fv","tags":["x_refsource_CONFIRM","advisory","web"]},{"url":"https://github.com/ionic-team/capacitor/commit/430356a91e1419fc66862dc09835081aa501677e","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/ionic-team/capacitor/commit/80b6c5e81d062e1e158914040f49e044d95b7ccb","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/ionic-team/capacitor/commit/85ccc44151fdd5ae5e0d806d875766ef4b84ad5d","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/ionic-team/capacitor/commit/af9a287fef45f0ac68ce640cb42fed2d06b0f1b4","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/ionic-team/capacitor/commit/d5e3170ba0ff155fc542b7e6d16cff5201406540","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/ionic-team/capacitor/commit/ee586ae680887ba99d066616f976db149542d922","tags":["x_refsource_MISC","fix","web"]},{"url":"https://github.com/ionic-team/capacitor/releases/tag/8.5.1","tags":["x_refsource_MISC","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103922","tags":["advisory"]},{"url":"https://github.com/ionic-team/capacitor/commit/745b5f805bf77bc6463977cc7d718cd9de44ccbc","tags":["web"]},{"url":"https://github.com/advisories/GHSA-rvm3-566m-v7fv"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/103xxx/CVE-2026-103922.json","tags":["advisory"]},{"url":"https://github.com/ionic-team/capacitor","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-103922","title":"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path","description":"Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame to /_capacitor_http_interceptor_. The native proxy can fetch an attacker-selected URL and return the response as a document at the application's own origin, allowing script in that response to access same-origin storage, cookies, and registered Capacitor plugin capabilities. Applications remain affected when CapacitorHttp is disabled because affected releases serve the proxy path regardless of that setting. This issue is fixed in versions 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1.","status":"published","published":"2026-10-01T17:27:05.758Z","modified":"2026-10-01T18:01:54.381Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-346","CWE-441"],"updated_at":"2026-11-02T13:34:37.420074Z"}],"euvd":[{"id":"EUVD-2026-90973","description":"Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame to /_capacitor_http_interceptor_. The native proxy can fetch an attacker-selected URL and return the response as a document at the application's own origin, allowing script in that response to access same-origin storage, cookies, and registered Capacitor plugin capabilities. Applications remain affected when CapacitorHttp is disabled because affected releases serve the proxy path regardless of that setting. This issue is fixed in versions 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1.","status":"published","published":"2026-10-01T17:27:05Z","modified":"2026-10-01T18:01:54Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T17:27:44.322377Z"}],"ghsa":[{"id":"GHSA-rvm3-566m-v7fv","title":"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path","description":"### Impact\n\nCapacitor's WebView navigation guard validated only the **host and scheme** of a\ntarget URL, not its **path**. Because the internal HTTP proxy path\n(`/_capacitor_http_interceptor_`) is served at the application's own origin, a\nframe navigation to it was always treated as in-app navigation and allowed.\n\nLoading that path as a document caused the native layer to fetch an arbitrary,\ncaller-specified URL and return the response body to the WebView **at the app's\nown origin**. Script in that response then ran with full same-origin trust:\naccess to `localStorage`, cookies, and every native capability the application\nexposes through its registered Capacitor plugins.\n\nThe proxy handler was additionally served **regardless of whether the\n`CapacitorHttp` plugin was enabled**, so applications that never enabled\n`CapacitorHttp` were also affected.\n\nExploitation requires a victim to activate a link inside the application's\nWebView. Any Capacitor application that renders user-controlled or unsanitized\nlinks (chat messages, comments, rich-text content) is a viable delivery surface.\n\nBoth **Android and iOS** are affected.\n\n### Patches\n\nTwo changes on each platform:\n\n1. The navigation guard now blocks frame navigations whose path is the internal\n   proxy path.\n2. The proxy handler is served only when `CapacitorHttp` is enabled, and never\n   for a document (main frame) request.\n\nLegitimate `CapacitorHttp` usage is unaffected. `fetch` and `XMLHttpRequest` are\nsubresource requests and do not pass through the navigation guard.\n\nUpgrade to a patched version, then rebuild and redistribute your application.\n\n### Workarounds\n\nIf you cannot upgrade immediately, note first that **disabling `CapacitorHttp`\nis not sufficient** on affected versions, because the proxy path is served\nregardless of that setting.\n\nRegistered plugins are consulted before the navigation guard runs, so a small\nplugin can block the path. On Android, override `shouldOverrideLoad(Uri url)` and\nreturn `true` when `url.getPath()` starts with `/_capacitor_http_interceptor_`.\nOn iOS, implement `shouldOverrideLoad(_:)` and return `true` for the same path.\nReturning `true` cancels the navigation; return `null`/`nil` for all other URLs\nso normal navigation is unchanged.\n\nIndependently, sanitize user-controlled link targets before rendering them in the\nWebView.","status":"published","published":"2026-10-05T22:53:10Z","modified":"2026-10-05T22:53:12Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-346","CWE-441"],"updated_at":"2026-11-02T14:41:25.889593Z"}],"nvd":[{"id":"CVE-2026-103922","description":"Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame to /_capacitor_http_interceptor_. The native proxy can fetch an attacker-selected URL and return the response as a document at the application's own origin, allowing script in that response to access same-origin storage, cookies, and registered Capacitor plugin capabilities. Applications remain affected when CapacitorHttp is disabled because affected releases serve the proxy path regardless of that setting. This issue is fixed in versions 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1.","status":"published","published":"2026-10-01T18:17:12.84Z","modified":"2026-10-02T18:44:11.27Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-346","CWE-441"],"updated_at":"2026-11-02T14:12:53.41762Z"}],"osv":[{"id":"CVE-2026-103922","title":"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path","description":"Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a target URL's host and scheme but not its path, allowing a victim who activates an untrusted link to navigate a frame to /_capacitor_http_interceptor_. The native proxy can fetch an attacker-selected URL and return the response as a document at the application's own origin, allowing script in that response to access same-origin storage, cookies, and registered Capacitor plugin capabilities. Applications remain affected when CapacitorHttp is disabled because affected releases serve the proxy path regardless of that setting. This issue is fixed in versions 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1.","status":"published","published":"2026-10-01T17:27:05.758Z","modified":"2026-10-28T11:03:36.857960836Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-346","CWE-441"],"updated_at":"2026-11-02T15:44:54.236592Z"},{"id":"GHSA-rvm3-566m-v7fv","title":"Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path","description":"### Impact\n\nCapacitor's WebView navigation guard validated only the **host and scheme** of a\ntarget URL, not its **path**. Because the internal HTTP proxy path\n(`/_capacitor_http_interceptor_`) is served at the application's own origin, a\nframe navigation to it was always treated as in-app navigation and allowed.\n\nLoading that path as a document caused the native layer to fetch an arbitrary,\ncaller-specified URL and return the response body to the WebView **at the app's\nown origin**. Script in that response then ran with full same-origin trust:\naccess to `localStorage`, cookies, and every native capability the application\nexposes through its registered Capacitor plugins.\n\nThe proxy handler was additionally served **regardless of whether the\n`CapacitorHttp` plugin was enabled**, so applications that never enabled\n`CapacitorHttp` were also affected.\n\nExploitation requires a victim to activate a link inside the application's\nWebView. Any Capacitor application that renders user-controlled or unsanitized\nlinks (chat messages, comments, rich-text content) is a viable delivery surface.\n\nBoth **Android and iOS** are affected.\n\n### Patches\n\nTwo changes on each platform:\n\n1. The navigation guard now blocks frame navigations whose path is the internal\n   proxy path.\n2. The proxy handler is served only when `CapacitorHttp` is enabled, and never\n   for a document (main frame) request.\n\nLegitimate `CapacitorHttp` usage is unaffected. `fetch` and `XMLHttpRequest` are\nsubresource requests and do not pass through the navigation guard.\n\nUpgrade to a patched version, then rebuild and redistribute your application.\n\n### Workarounds\n\nIf you cannot upgrade immediately, note first that **disabling `CapacitorHttp`\nis not sufficient** on affected versions, because the proxy path is served\nregardless of that setting.\n\nRegistered plugins are consulted before the navigation guard runs, so a small\nplugin can block the path. On Android, override `shouldOverrideLoad(Uri url)` and\nreturn `true` when `url.getPath()` starts with `/_capacitor_http_interceptor_`.\nOn iOS, implement `shouldOverrideLoad(_:)` and return `true` for the same path.\nReturning `true` cancels the navigation; return `null`/`nil` for all other URLs\nso normal navigation is unchanged.\n\nIndependently, sanitize user-controlled link targets before rendering them in the\nWebView.","status":"published","published":"2026-10-05T22:53:10Z","modified":"2026-10-05T23:00:05.499076955Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-346","CWE-441"],"updated_at":"2026-11-02T15:46:56.281047Z"}]}}