Advisories · Technology

agentfront mcp-from-openapi.

Every CVE that names agentfront mcp-from-openapi among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115751 CVE record

CVSS 6.3 Medium

mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
- agentfront mcp-from-openapi
- CWE-184
Not analysed yet 23 Oct 2026
CVE-2026-115750 CVE record

CVSS 6.3 Medium

mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
- agentfront mcp-from-openapi
- Hard-coded credentials
Not analysed yet 23 Oct 2026