CVE-2026-67531

FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via getTool(), and because Zod v4 defines _zod as a non-configurable, non-writable own property, the ECMAScript Proxy invariants force the security membrane to hand back the raw host object, letting a script reach _zod.constr.constructor (the host Function constructor) and execute arbitrary code in the server process. A single tools/call is sufficient to escape the sandbox and achieve remote code execution as the server user, exposing everything the process holds such as OAuth client secrets, JWT_SECRET, session keys, database credentials, and cloud instance metadata. Because the framework's DEFAULT_AUTH_OPTIONS is public mode, an unconfigured server serves this to unauthenticated callers, and on authenticated servers an indirect prompt injection in tool output or fetched content can trigger it without a human attackerThis issue is fixed in version 1.5.7.

• CWE-94

• https://github.com/agentfront/frontmcp/commit/209cddd19a8d4db0777f725b527818da7df6f67f
• https://github.com/agentfront/frontmcp/security/advisories/GHSA-mp29-fxh8-92px
• https://github.com/agentfront/frontmcp/security/advisories/GHSA-mp29-fxh8-92px

Published

Aug 6, 2026

Last Modified

Aug 6, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6752Incorrect boundary conditions in the WebRTC component. This …7.3
• CVE-2026-67527OpenProject is open-source, web-based project management sof…7.6
• CVE-2026-67528OpenProject is open-source, web-based project management sof…4.3
• CVE-2026-67529OpenProject is open-source, web-based project management sof…4.3
• CVE-2026-6753Incorrect boundary conditions in the WebRTC component. This …7.3
• CVE-2026-67530WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0…6.4
• CVE-2026-6754Use-after-free in the JavaScript Engine component. This vuln…7.5
• CVE-2026-6755Mitigation bypass in the DOM: postMessage component. This vu…6.5
• CVE-2026-67550re2 provides Node.js bindings for Google's RE2 regular expre…5.7
• CVE-2026-67551pre-authentication attacker could leverage type size/count h…7.5
• CVE-2026-67552A pre-authentication attacker could leverage type nesting to…7.5
• CVE-2026-67553An authenticated attacker could exceed the session flow cont…6.5