Vulnerability · Published May 2, 2026 · Assigned by VulDB

CVE-2026-7644ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization

High 7.3

In plain English

A high-severity security flaw in NextChat from ChatGPTNextWeb. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.3%top 76.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products (as reported)

Vendor	Product	Versions
ChatGPTNextWeb	NextChat	2.16.02.16.1

Weakness: CWE-285, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-360756 | ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization vdb-entry, technical-description
VDB-360756 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #806851 | ChatGPTNextWeb NextChat 2.16.1 Unauthenticated Remote Code Execution third-party-advisory
https://github.com/ChatGPTNextWeb/NextChat/issues/6757 exploit, issue-tracking
https://github.com/ChatGPTNextWeb/NextChat/ product