Skip to contentOnyx-dot-app Onyx vulnerabilities
- onyx-dot-app onyxonyx-dot-app Onyx PreviewTab.tsx cross site scriptingCVE-2026-116004Public exploit5.1 Medium
- onyx-dot-app onyxOnyx 4.6.6 Custom Tool Secret Header Disclosure via Tool EndpointsCVE-2026-857007.1 High
- onyx-dot-app onyxOnyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosureCVE-2026-631786.5 Medium
- onyx-dot-app onyxOnyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP serversCVE-2026-714249.6 Critical
- onyxOnyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users filesCVE-2026-422776.5 Medium
- onyxOnyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessionsCVE-2026-422764.3 Medium
- onyxOnyx Chat Interface a3_generate_simple_sql.py generate_simple_sql sql injectionCVE-2025-78945.3 Medium
- nvidia mellanox os, metrox-2, metrox-3 xc +5 more +7 moreNVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP...CVE-2024-01044.2 Medium
- nvidia mellanox os, metrox-2, metrox-3 xc +10 more +12 moreNVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter,...CVE-2024-01017.5 High