agentfront vulnerabilities

Newest CVEs

• CVE-2026-115751

  mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname

  agentfront · mcp-from-openapi

  Medium6.3
• CVE-2026-115750

  mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects

  agentfront · mcp-from-openapi

  Medium6.3
• CVE-2026-59973

  mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi

  agentfront · frontmcp

  High8.5
• CVE-2026-67531

  FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool

  agentfront · frontmcp

  Critical9.3
• CVE-2026-39885

  FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications

  agentfront · frontmcp

  High7.5
• CVE-2026-27597

  @enclave-vm/core is vulnerable to Sandbox Escape

  agentfront · enclave

  Critical10.0
• CVE-2026-25533

  Enclave has a sandbox escape via infinite recursion and error objects

  agentfront · enclave

  Medium6.4
• CVE-2026-22686

  Sandbox Escape via Host Error Prototype Chain in enclave-vm

  agentfront · enclave

  Critical10.0