低於 2.3.3 的 Nginx UI 版本包含一個重大敏感資訊洩漏弱點，導致未經驗證的攻擊者可存取 /api/backup 端點，並從 X-Backup-Security 回應標頭擷取加密金鑰。這會讓攻擊者下載並解密完整的系統備份，進而洩漏敏感資料，例如使用者憑證、工作階段權仗、SSL 私密金鑰和 Nginx 設定。

バージョン 2.3.3 より前の Nginx UI には、重大な機密情報漏洩の脆弱性が含まれています。この脆弱性により、未認証の攻撃者が /api/backup エンドポイントにアクセスし、X-Backup-Security 応答ヘッダーから暗号化キーを取得する可能性があります。これにより、攻撃者が完全なシステムバックアップをダウンロードして復号できるようになり、ユーザーの認証情報、セッショントークン、SSL 秘密鍵、Nginx 構成などの機密データが公開される可能性があります。

低于版本 2.3.3 的 Nginx UI 包含严重的敏感信息泄露漏洞，导致未经过身份验证的攻击者可以访问 /api/backup 端点，并从 X-Backup-Security 响应标头检索加密密钥。攻击者可利用此缺陷下载和解密完整系统备份，泄露用户凭据、会话标记、SSL 私钥和 Nginx 配置等敏感数据。

Nginx UI version below 2.3.3 contains a critical sensitive information disclosure vulnerability that allows unauthenticated attackers to access the /api/backup endpoint and retrieve encryption keys from the X-Backup-Security response header. This enables attackers to download and decrypt full system backups, exposing sensitive data such as user credentials, session tokens, SSL private keys, and Nginx configurations.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup
    endpoint is accessible without authentication and discloses the encryption keys required to decrypt the
    backup in the X-Backup-Security response header. This allows an unauthenticated attacker to download a
    full system backup containing sensitive data (user credentials, session tokens, SSL private keys, Nginx
    configurations) and decrypt it immediately. This issue has been patched in version 2.3.3. (CVE-2026-27944)

ID	Name	Product	Family	Published	Updated	Severity
115158	Nginx UI < 2.3.3 敏感資料洩漏	Web App Scanning	Component Vulnerability	3/10/2026	3/10/2026	critical
115158	Nginx UI < 2.3.3 機密情報の漏洩	Web App Scanning	Component Vulnerability	3/10/2026	3/10/2026	critical
115158	Nginx UI < 2.3.3 敏感信息泄露	Web App Scanning	Component Vulnerability	3/10/2026	3/10/2026	critical
115158	Nginx UI < 2.3.3 Sensitive Information Disclosure	Web App Scanning	Component Vulnerability	3/10/2026	3/10/2026	critical
438415	SCA: security update for github.com/0xJacky/Nginx-UI (GHSA-g9w5-qffc-6762)	Tenable Self-Hosted Container Security	SCA Checks	3/5/2026	7/2/2026	critical
438415	SCA: security update for github.com/0xJacky/Nginx-UI (GHSA-g9w5-qffc-6762)	Tenable Cloud Security	SCA Checks	3/5/2026	7/2/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical