CVE-2026-110802 · Other
NO FIX YET · SEE WHAT TO DO
Altair is a GraphQL client, and its iframe-sandbox page passes attacker-supplied script URLs into the page when opened directly. A victim who opens a crafted link runs the attacker's script in the origin serving Altair, where it can read script-accessible storage and make same-origin requests.
first public Oct 16, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Teams that host Altair's web client on their own origin, where a victim can be sent a crafted iframe-sandbox URL. Desktop or fully offline installs that never serve this origin are unlikely to be exposed; the sources do not say more.
Not affected if versions-8.5.8-or-later, versions-before-7.2.4
Who cares altair, graphql, self-hosted, web
packages/altair-iframe-sandbox or the deployed web app's package version.7.2.4 up to but not including 8.5.8.8.5.8.Altair is a GraphQL client for all platforms. From 7.2.4 until 8.5.8, packages/altair-iframe-sandbox/src/main.ts reads plugin_sandbox_opts from the iframe-sandbox query string and passes attacker-controlled scriptUrls to injectScript() in packages/altair-core/src/utils/inject.ts, which creates script elements in the page. The intended parent iframe flow places the page in an iframe with sandbox allow-scripts and without allow-same-origin, but direct navigation to a crafted iframe-sandbox URL omits that isolation and executes the supplied script in the origin serving Altair. Exploitation requires a victim to open the crafted URL, and the resulting script can access script-readable storage and make same-origin requests according to the deployment's authentication and cookie controls. This issue is fixed in version 8.5.8.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.