Vulnerability · Published Sep 18, 2026 · Assigned by GitHub_M

CVE-2026-63646CordysCRM MCP Form Configuration Endpoint Exposed to Anonymous Users

Medium 6.9

In plain English

A medium-severity information exposure in CordysCRM from 1Panel-dev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.7%top 48.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, GET /mcp/form/config/{formKey} calls McpController.getMcpField without authentication because ShiroFilter.addPublicPathFilters marks /mcp/** as anonymous and the controller has no permission annotation. An unauthenticated caller can obtain field names, types, required flags, default values, options, validation rules, and binding sources for CRM modules, allowing reconstruction of the application data model and more targeted attacks against other inputs. This issue is fixed in version 1.7.2.

Affected products (as reported)

Vendor	Product	Versions
1Panel-dev	CordysCRM	< 1.7.2

Weakness: CWE-200 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://github.com/1Panel-dev/CordysCRM/security/advisories/GHSA-46p5-m7pq-82hm x_refsource_CONFIRM
https://github.com/1Panel-dev/CordysCRM/pull/2725 x_refsource_MISC
https://github.com/1Panel-dev/CordysCRM/commit/ea8d5f128b94659ce881e9d034a37c18fa86bbbc x_refsource_MISC
https://github.com/1Panel-dev/CordysCRM/releases/tag/v1.7.2 x_refsource_MISC