CVE-2026-39885

FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 2.3.0, the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser to dereference $ref pointers in OpenAPI specifications without configuring any URL restrictions or custom resolvers. A malicious OpenAPI specification containing $ref values pointing to internal network addresses, cloud metadata endpoints, or local files will cause the library to fetch those resources during the initialize() call. This enables Server-Side Request Forgery (SSRF) and local file read attacks when processing untrusted OpenAPI specifications. This vulnerability is fixed in 2.3.0.

• CWE-918

• https://github.com/agentfront/frontmcp/releases/tag/v1.0.4Product
• https://github.com/agentfront/frontmcp/security/advisories/GHSA-v6ph-xcq9-qxxjExploit, Vendor Advisory
• https://github.com/agentfront/frontmcp/security/advisories/GHSA-v6ph-xcq9-qxxjExploit, Vendor Advisory

Published

Apr 8, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3988GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
• CVE-2026-39880Remnawave Backend is the backend for the Remnawave proxy and…4.9
• CVE-2026-39881Vim is an open source, command line text editor. Prior to 9.…7.8
• CVE-2026-39882OpenTelemetry-Go is the Go implementation of OpenTelemetry. …5.3
• CVE-2026-39883OpenTelemetry-Go is the Go implementation of OpenTelemetry. …7
• CVE-2026-39884mcp-server-kubernetes is a Model Context Protocol server for…8.1
• CVE-2026-39886OpenEXR provides the specification and reference implementat…5.3
• CVE-2026-39888PraisonAI is a multi-agent teams system. Prior to 1.5.115, e…9.9
• CVE-2026-39889PraisonAI is a multi-agent teams system. Prior to 4.5.115, t…7.5
• CVE-2026-3989SGLangs `replay_request_dump.py` contains an insecure pickle…7.8
• CVE-2026-39890PraisonAI is a multi-agent teams system. Prior to 4.5.115, t…9.8
• CVE-2026-39891PraisonAI is a multi-agent teams system. Prior to 4.5.115, t…8.8