What’s Vulnerable › Products

agentfront frontmcp vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your agentfront frontmcp version is affected

Latest agentfront frontmcp vulnerabilities

• CVE-2026-59973 — mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi (CVSS 8.5)
• CVE-2026-67531 — FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool (CVSS 9.3)
• CVE-2026-39885 — FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications (CVSS 7.5)