CVE-2026-115751
mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using trailing-dot hostnames. Attackers who control an OpenAPI spec URL or redirect target can append a root dot to a blocked hostname to fetch content from operator-blocked hosts.
| CWE | CWE-184 |
| Vendor | agentfront |
| Product | mcp-from-openapi |
| Published | Oct 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for agentfront mcp-from-openapi
Be the first to know when new low vulnerabilities affecting agentfront mcp-from-openapi are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
agentfront / mcp-from-openapi
2.2.0 < 2.9.0
References
github.com: https://github.com/agentfront/mcp-from-openapi/security/advisories/GHSA-ff5q-5r4v-fw4v github.com: https://github.com/agentfront/mcp-from-openapi/pull/42 github.com: https://github.com/agentfront/mcp-from-openapi/commit/47fb7a655de33958b0c923490ab244343eb5fc44 github.com: https://github.com/agentfront/mcp-from-openapi/releases/tag/v2.9.0 vulncheck.com: https://www.vulncheck.com/advisories/mcp-from-openapi-2.2.0-before-2.9.0-ssrf-blockedhosts-bypass-via-trailing-dot-hostname
Credits
Zachariah Mithani (AploSec)