A critical Vite dev server flaw allows code execution when exposed with –host. Check your version, upgrade to a patched release and harden your dev setup.