Aagentfront

Products

Exploited and recent CVEs

• CVE-2026-115751 Low 3.7 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname 0.2%
• CVE-2026-115750 Low 3.7 mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects 0.2%
• CVE-2026-59973 High 8.5 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi 0.4%
• CVE-2026-59973 High 8.5 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi 0.4%
• CVE-2026-67531 Critical 9.3 FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool 0.7%
• CVE-2026-39885 High 7.5 FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications 0.4%
• CVE-2026-27597 Critical 10.0 @enclave-vm/core is vulnerable to Sandbox Escape 1.0%
• CVE-2026-25533 Medium 6.4 Enclave has a sandbox escape via infinite recursion and error objects 0.3%
• CVE-2026-22686 Critical 10.0 Sandbox Escape via Host Error Prototype Chain in enclave-vm 0.8%