Skip to content
OpenAdvisories

Product · horizon921

mcpilot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-10280

    horizon921 mcpilot MCP API Call Endpoint route.ts server-side request forgery

    A security flaw has been discovered in horizon921 mcpilot 0.1.0. The impacted element is an unknown function of the file client/src/app/api/mcp/call/route.ts of the component MCP API Call Endpoint. The manipulation of the argument serverBaseUrl results in ser…

    horizon921 mcpilot