Skip to content
OpenAdvisories

Product · apify

apify-mcp-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-50143

    Actor MCP path authority injection leaks Apify token

    The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL…

    apify apify-mcp-server @apify/actors-mcp-server npm