onyx-dot-app Onyx

• CVE-2026-116004 Low 3.5 onyx-dot-app Onyx PreviewTab.tsx cross site scripting 0.2%
• CVE-2026-85700 Medium 6.5 Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints 0.5%
• CVE-2026-63178 Medium 6.5 Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure 0.5%
• CVE-2026-71424 Critical 9.6 Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers 0.5%
• CVE-2026-42277 Medium 6.5 Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files 0.2%
• CVE-2026-42276 Medium 4.3 Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions 0.3%