CVE-2026-115750

LowCVSS 3.7

Published: 23/10/2026(UTC)Updated: 23/10/2026(UTC)Translated: 23/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

Summary

mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability because safeFetch() forwards Authorization and Cookie headers on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL() spec requests to their own origin to steal bearer tokens or cookies.

Risk Assessment

An attacker can capture authentication tokens or session cookies, potentially leading to account takeover or unauthorized access to protected resources.

Recommendation

Upgrade mcp-from-openapi to version 2.9.0 or later. Ensure authentication headers are not forwarded on cross-origin redirects.

Other vulnerabilities in mcp-from-openapi

CVE-2026-115751Low
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains an SSRF vulnerability that bypasses the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers controlling an OpenAPI spec URL or redirect target can append a root dot to a blocked hostname to fetch content from operator-blocked hosts.

Original NVD description (English source)

mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch() forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL() spec requests to their own origin to steal bearer tokens or cookies.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS