Skip to content
OpenAdvisories

Vendor

agentfront

8 known vulnerabilities.

Products

frontmcp 3 mcp-from-openapi 3 enclave 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-115751

    mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname

    Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target …

    agentfront mcp-from-openapi
  • Low 3.7
    CVE-2026-115750

    mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects

    mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch() forwards them on cross-origin redirects. Attackers controlling a spec host or abusing a…

    agentfront mcp-from-openapi