CVE-2026-27597

CVE-2026-27597 - version Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 10.0 Impact: Confidentiality, Integrity, Availability Published: 2026-02-25 Technical Summary Enclave is a secure...

CVE-2026-115751

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

EUVD-2026-108959

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

CVE-2026-115751 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

CVE-2026-115751

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

CVE-2026-115751 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

CVE-2026-115751 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

CVE-2026-115751

The Agentfront mcp-from-openapi package (versions 2.2.0 through 2.8.x ) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is an incomplete list of disallowed inputs, where the ssrf.blockedHosts denylist can be bypassed using trailing-dot hostnames . An attacker who controls a...

AgentFront mcp-from-openapi trust management issue vulnerability

AgentFront versions mcp-from-openapi from 2.5.0 up to 2.9.0 contain a trust management vulnerability. This issue arises because safeFetch forwards Authorization and Cookie headers during cross-domain redirects. Attackers can control the spec host or exploit open redirects to redirect spec request...

PT-2026-122083

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...

AgentFront mcp-from-openapi input validation error vulnerability

In AgentFront versions mcp-from-openapi from 2.2.0 up to 2.9.0, there is an input validation error vulnerability. This vulnerability arises because it is possible to bypass the ssrf.blockedHosts list by using a trailing hostname. When attackers control the OpenAPI specification URL or redirect...

Exploit for Code Injection in Agentfront Enclave

CVE-2026-22686-...

Exploit for Code Injection in Agentfront Enclave

CVE-2026-27597 - version Remote Code Execution Quick Usage...

frontmcp code issue vulnerabilities

FrontMCP is an open-source MCP server development framework based on TypeScript, created by AgentFront. Versions of FrontMCP prior to 2.3.0 had code-related vulnerabilities. These vulnerabilities stemmed from the lack of restrictions on URL reference resolution, which could lead to server-side...

Enclave code injection vulnerability

Enclave is a sandbox software open source by AgentFront. Versions of Enclave prior to 2.11.1 had a code injection vulnerability. This vulnerability stemmed from the possibility of escaping the security boundaries set by @enclave-vm/core, which could lead to remote code execution...

Enclave security vulnerabilities

Enclave is an open source sandboxing software from AgentFront. A security vulnerability exists in versions prior to Enclave 2.7.0 that stems from a sandbox escape that could lead to the execution of arbitrary code in the host Node.js runtime...