{"id":"CVE-2026-115750","aliases":[],"cve":{"records":[{"id":"CVE-2026-115750","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-23T12:59:06.316Z","published":"2026-10-23T13:03:32.783Z","modified":"2026-11-04T20:36:16.897Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-23T13:03:32.783Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-04T20:36:16.897Z"}],"references":[{"url":"https://github.com/agentfront/mcp-from-openapi/security/advisories/GHSA-ff5q-5r4v-fw4v","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://github.com/agentfront/mcp-from-openapi/pull/42","tags":["issue-tracking","patch"],"source":"VulnCheck"},{"url":"https://github.com/agentfront/mcp-from-openapi/commit/47fb7a655de33958b0c923490ab244343eb5fc44","tags":["patch"],"source":"VulnCheck"},{"url":"https://github.com/agentfront/mcp-from-openapi/releases/tag/v2.9.0","tags":["release-notes"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/mcp-from-openapi-from-2.5.0-before-2.9.0-credential-leak-via-cross-origin-redirects","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/agentfront/mcp-from-openapi/security/advisories/GHSA-ff5q-5r4v-fw4v","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-522","description":"Insufficiently Protected Credentials","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frontmcp:mcp-from-openapi:*:*:*:*:*:*:*:*","versionStartIncluding":"2.5.0","versionEndExcluding":"2.9.0"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-04T20:35:55.841644Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch() forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL() spec requests to their own origin to steal bearer tokens or cookies.","score":6.3,"severity":"medium","published":"2026-10-23T13:03:32.783Z","modified":"2026-11-04T20:36:16.897Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"agentfront","name":"mcp-from-openapi","platforms":[],"versions":[{"version":"2.5.0","status":"affected","lessThan":"2.9.0","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:npm/mcp-from-openapi","packageIdentity":{"ecosystem":"npm","name":"mcp-from-openapi"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-115750"}],"remediation":[],"references":["https://github.com/agentfront/mcp-from-openapi/security/advisories/GHSA-ff5q-5r4v-fw4v","https://github.com/agentfront/mcp-from-openapi/pull/42","https://github.com/agentfront/mcp-from-openapi/commit/47fb7a655de33958b0c923490ab244343eb5fc44","https://github.com/agentfront/mcp-from-openapi/releases/tag/v2.9.0","https://www.vulncheck.com/advisories/mcp-from-openapi-from-2.5.0-before-2.9.0-credential-leak-via-cross-origin-redirects"],"sources":[{"name":"CVE","id":"CVE-2026-115750","modified":"2026-11-04T20:36:16.897Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115750"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.3},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","score":3.7}],"sourceAffected":[],"observedAt":"2026-11-04T21:07:08.821Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:00:33.317Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-05T06:15:39.302Z","attemptedAt":"2026-11-05T06:15:39.302Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-05T06:20:33.601Z","attemptedAt":"2026-11-05T06:20:33.601Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-05T06:20:32.812Z","attemptedAt":"2026-11-05T06:20:32.812Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-05T06:15:39.045Z","attemptedAt":"2026-11-05T06:15:39.045Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-115750","url":"https://www.first.org/epss/","probability":0.00221,"percentile":0.12762,"date":"2026-11-04","checkedAt":"2026-11-05T06:15:39.045Z"},{"source":"NVD","id":"CVE-2026-115750","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115750","modified":"2026-11-04T21:17:51.960","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-05T06:15:39.302Z"},{"source":"NVD","id":"CVE-2026-115750","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115750","modified":"2026-11-04T21:17:51.960","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-05T06:15:39.302Z"},{"source":"ENISA EUVD","id":"EUVD-2026-108958","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108958","modified":"Nov 4, 2026, 8:36:16 PM","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-11-05T06:20:32.812Z"},{"source":"GitHub Advisory Database","id":"GHSA-3gr3-m4x5-3fpp","url":"https://github.com/advisories/GHSA-3gr3-m4x5-3fpp","modified":"2026-10-23T15:31:37Z","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-05T06:20:33.601Z"}],"aiSummary":{"text":"mcp-from-openapi versions 2.5.0 before 2.9.0 have a credential leak vulnerability via cross-origin redirects, allowing attackers to capture Authorization and Cookie headers. Attackers need control of a spec host or an open redirect to exploit this. The impact is the potential theft of bearer tokens or cookies.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-04T21:11:07.934Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115750"}]}}