CVE-2026-115751Low· 3.7▾ SunlitAgentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec U…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked hostname to fetch content from operator-blocked hosts.
mcp-from-openapi >= 2.2.0 < 2.9.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115750Low· 3.7mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
CVE-2026-59973High· 8.5FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP)
CVE-2026-114615High· 7.4authlib: Authlib: Authentication bypass via improper asymmetric key validation (CVE-2026-114615)
CVE-2026-114729Medium· 5.3Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass
CVE-2026-114728Medium· 5.3Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes
CVE-2026-113605High· 7.2Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database