Skip to content
OpenAdvisories

Vendor

agentfront

8 known vulnerabilities.

Products

frontmcp 3 mcp-from-openapi 3 enclave 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-67531

    FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool

    FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via getTool(), and because Zod v4 defines _zod as a non-configurable, non-w…

    agentfront frontmcp
  • Critical 10.0
    CVE-2026-27597 Public exploit

    @enclave-vm/core is vulnerable to Sandbox Escape

    Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by `@enclave-vm/core`, which can be used to achieve remote code execution (RCE). The issue has bee…

    agentfront enclave @enclave-vm/core npm
  • Critical 10.0
    CVE-2026-22686 Public exploit

    Sandbox Escape via Host Error Prototype Chain in enclave-vm

    Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.7.0, there is a critical sandbox escape vulnerability in enclave-vm that allows untrusted, sandboxed JavaScript code to execute arbitrary code in the host Node.js run…

    agentfront enclave enclave-vm npm