CVE-2026-115751

LowCVSS 3.7

Published: 23/10/2026(UTC)Updated: 29/10/2026(UTC)Translated: 23/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains an SSRF vulnerability that bypasses the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers controlling an OpenAPI spec URL or redirect target can append a root dot to a blocked hostname to fetch content from operator-blocked hosts.

Risk Assessment

An attacker can reach internal resources or blocked hosts, bypassing the operator's security policy.

Recommendation

Upgrade mcp-from-openapi to version 2.9.0 or later. Normalize hostnames (strip trailing dots) before checking the denylist.

Other vulnerabilities in mcp-from-openapi

CVE-2026-115750Low
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability because safeFetch() forwards Authorization and Cookie headers on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL() spec requests to their own origin to steal bearer tokens or cookies.

Original NVD description (English source)

Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked hostname to fetch content from operator-blocked hosts.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS