Nuxt DevTools versions prior to 2.6.4 contain a cross-site scripting (XSS) vulnerability that could allow extraction of Nuxt authentication tokens under certain configurations. This vulnerability has been addressed in version 2.6.4, and users are advised to upgrade to this fixed version to mitigate the risk.