What’s Vulnerable › Products

agentfront mcp-from-openapi vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your agentfront mcp-from-openapi version is affected

Latest agentfront mcp-from-openapi vulnerabilities

• CVE-2026-115750 — mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects (CVSS 3.7)
• CVE-2026-115751 — mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname (CVSS 3.7)
• CVE-2026-59973 — mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi (CVSS 8.5)