Onyx-dot-app vulnerabilities

Products

• Onyx 9

Newest

• onyx-dot-app onyx onyx-dot-app Onyx PreviewTab.tsx cross site scripting CVE-2026-116004 Public exploit 5.1 MediumOctober 25, 2026
• onyx-dot-app onyx Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints CVE-2026-85700 7.1 HighSeptember 4, 2026
• onyx-dot-app onyx Onyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosure CVE-2026-63178 6.5 MediumAugust 17, 2026
• onyx-dot-app onyx Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers CVE-2026-71424 9.6 CriticalAugust 17, 2026
• onyx Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files CVE-2026-42277 6.5 MediumMay 8, 2026
• onyx Onyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessions CVE-2026-42276 4.3 MediumMay 8, 2026
• onyx Onyx Chat Interface a3_generate_simple_sql.py generate_simple_sql sql injection CVE-2025-7894 5.3 MediumJuly 20, 2025
• nvidia mellanox os, metrox-2, metrox-3 xc +5 more +7 more NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP... CVE-2024-0104 4.2 MediumAugust 8, 2024
• nvidia mellanox os, metrox-2, metrox-3 xc +10 more +12 more NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter,... CVE-2024-0101 7.5 HighAugust 8, 2024