{"id":"CVE-2026-115751","aliases":[],"cve":{"records":[{"id":"CVE-2026-115751","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-23T12:59:06.676Z","published":"2026-10-23T13:03:33.492Z","modified":"2026-10-29T17:42:32.687Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-23T13:03:33.492Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T17:42:32.687Z"}],"references":[{"url":"https://github.com/agentfront/mcp-from-openapi/security/advisories/GHSA-ff5q-5r4v-fw4v","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://github.com/agentfront/mcp-from-openapi/pull/42","tags":["issue-tracking","patch"],"source":"VulnCheck"},{"url":"https://github.com/agentfront/mcp-from-openapi/commit/47fb7a655de33958b0c923490ab244343eb5fc44","tags":["patch"],"source":"VulnCheck"},{"url":"https://github.com/agentfront/mcp-from-openapi/releases/tag/v2.9.0","tags":["release-notes"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/mcp-from-openapi-2.2.0-before-2.9.0-ssrf-blockedhosts-bypass-via-trailing-dot-hostname","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/agentfront/mcp-from-openapi/security/advisories/GHSA-ff5q-5r4v-fw4v","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-184","description":"Incomplete List of Disallowed Inputs","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frontmcp:mcp-from-openapi:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.9.0"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T17:41:55.395840Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked hostname to fetch content from operator-blocked hosts.","score":6.3,"severity":"medium","published":"2026-10-23T13:03:33.492Z","modified":"2026-10-29T17:42:32.687Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"agentfront","name":"mcp-from-openapi","platforms":[],"versions":[{"version":"2.2.0","status":"affected","lessThan":"2.9.0","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:npm/mcp-from-openapi","packageIdentity":{"ecosystem":"npm","name":"mcp-from-openapi"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-115751"}],"remediation":[],"references":["https://github.com/agentfront/mcp-from-openapi/security/advisories/GHSA-ff5q-5r4v-fw4v","https://github.com/agentfront/mcp-from-openapi/pull/42","https://github.com/agentfront/mcp-from-openapi/commit/47fb7a655de33958b0c923490ab244343eb5fc44","https://github.com/agentfront/mcp-from-openapi/releases/tag/v2.9.0","https://www.vulncheck.com/advisories/mcp-from-openapi-2.2.0-before-2.9.0-ssrf-blockedhosts-bypass-via-trailing-dot-hostname"],"sources":[{"name":"CVE","id":"CVE-2026-115751","modified":"2026-10-29T17:42:32.687Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115751"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.3},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","score":3.7}],"sourceAffected":[],"observedAt":"2026-10-29T17:50:47.328Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:25:31.038Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T18:05:35.149Z","attemptedAt":"2026-10-29T18:05:35.149Z"},{"source":"GHSA","status":"available","checkedAt":"2026-10-29T18:05:35.192Z","attemptedAt":"2026-10-29T18:05:35.192Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T18:05:34.710Z","attemptedAt":"2026-10-29T18:05:34.710Z"},{"source":"EPSS","status":"available","checkedAt":"2026-10-29T18:05:35.705Z","attemptedAt":"2026-10-29T18:05:35.705Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-108959","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108959","modified":"Oct 29, 2026, 5:42:32 PM","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-10-29T18:05:34.710Z"},{"source":"NVD","id":"CVE-2026-115751","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115751","modified":"2026-10-23T19:57:42.660","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-10-29T18:05:35.149Z"},{"source":"NVD","id":"CVE-2026-115751","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115751","modified":"2026-10-23T19:57:42.660","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-10-29T18:05:35.149Z"},{"source":"GitHub Advisory Database","id":"GHSA-wfcf-h98w-gp9m","url":"https://github.com/advisories/GHSA-wfcf-h98w-gp9m","modified":"2026-10-23T15:31:37Z","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-10-29T18:05:35.192Z"},{"source":"FIRST EPSS","id":"CVE-2026-115751","url":"https://www.first.org/epss/","probability":0.0025,"percentile":0.16379,"date":"2026-10-29","checkedAt":"2026-10-29T18:05:35.705Z"}],"aiSummary":{"text":"mcp-from-openapi versions 2.2.0 before 2.9.0 have a server-side request forgery vulnerability, allowing attackers to bypass blocked hosts using trailing-dot hostnames. Attackers need control of an OpenAPI spec URL or redirect target. This may allow fetching content from blocked hosts.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:54:09.870Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115751"}]}}