Skip to content
OpenAdvisories

Vendor

ogx-ai

1 known vulnerabilities.

Products

ogx 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-85666

    ogx 1.3.1 Server-Side Request Forgery via MCP tool server_url

    OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vulnerability in the OpenAI-compatible POST /v1/responses endpoint. MCP tool definitions accept a server_url parameter (along with headers and autho…

    ogx-ai ogx