Skip to content
Agentfront vulnerabilities
Newest
-
agentfront mcp-from-openapi
mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
CVE-2026-115751
6.3 Medium
-
agentfront mcp-from-openapi
mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
CVE-2026-115750
6.3 Medium
-
@frontmcp adapters, agentfront frontmcp, mcp-from-openapi +2 more
mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi
CVE-2026-59973
Fix available
8.5 High
-
agentfront frontmcp
FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool
CVE-2026-67531
9.3 Critical
-
agentfront frontmcp, frontmcp mcp-from-openapi, @frontmcp adapters +3 more +5 more
FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications
CVE-2026-39885
Fix available
7.5 High
-
agentfront enclave
@enclave-vm/core is vulnerable to Sandbox Escape
CVE-2026-27597
Public exploitFix available
10.0 Critical
-
agentfront enclave
Enclave has a sandbox escape via infinite recursion and error objects
CVE-2026-25533
Fix available
6.4 Medium
-
agentfront enclave
Sandbox Escape via Host Error Prototype Chain in enclave-vm
CVE-2026-22686
Public exploitFix available
10.0 Critical