38 matches found
CVE-2026-115750
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...
CVE-2026-115751
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...
CVE-2026-115751
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...
EUVD-2026-108959
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...
CVE-2026-115751 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...
@frontmcp/adapters (>=1.0.4, <=1.10.6), @frontmcp/edge (>=1.9.2, <=1.10.6) +2 more potentially affected by CVE-2026-115751 via mcp-from-openapi (>=2.3.0, <=2.8.0)
mcp-from-openapi NPM version =2.3.0, =1.0.4, =1.9.2, =0.0.1, =0.1.0, =0.16.0 Source cves: CVE-2026-115751 Source advisory: MEND:CVE-2026-115751...
CVE-2026-115751 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...
CVE-2026-115751 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...
CVE-2026-115751
The Agentfront mcp-from-openapi package (versions 2.2.0 through 2.8.x ) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is an incomplete list of disallowed inputs, where the ssrf.blockedHosts denylist can be bypassed using trailing-dot hostnames . An attacker who controls a...
CVE-2026-115750
The mcp-from-openapi library (versions 2.5.0 before 2.9.0 ) is vulnerable to a credential exposure flaw. The root cause is that the safeFetch() function forwards Authorization and Cookie headers during cross-origin redirects. An attacker controlling a specification host or exploiting an open redi...
EUVD-2026-108958
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...
CVE-2026-115750
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...
@frontmcp/adapters (>=1.5.0, <=1.10.6), @frontmcp/edge (>=1.9.2, <=1.10.6) +2 more potentially affected by CVE-2026-115750 via mcp-from-openapi (>=2.5.0, <=2.8.0)
mcp-from-openapi NPM version =2.5.0, =1.5.0, =1.9.2, =1.5.0, =0.1.0, =0.16.0 Source cves: CVE-2026-115750 Source advisory: MEND:CVE-2026-115750...
CVE-2026-115750 mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...
CVE-2026-115750 mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...
AgentFront mcp-from-openapi trust management issue vulnerability
AgentFront versions mcp-from-openapi from 2.5.0 up to 2.9.0 contain a trust management vulnerability. This issue arises because safeFetch forwards Authorization and Cookie headers during cross-domain redirects. Attackers can control the spec host or exploit open redirects to redirect spec request...
PT-2026-122082
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL spe...
AgentFront mcp-from-openapi input validation error vulnerability
In AgentFront versions mcp-from-openapi from 2.2.0 up to 2.9.0, there is an input validation error vulnerability. This vulnerability arises because it is possible to bypass the ssrf.blockedHosts list by using a trailing hostname. When attackers control the OpenAPI specification URL or redirect...
PT-2026-122083
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked...
CVE-2026-59973
FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...