Skip to content
OpenAdvisories

Product · olo-dot-io

Uni-CLI

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-58497

    Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests

    Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin heade…

    olo-dot-io Uni-CLI @zenalexa/unicli npm