CVE-2026-115750 agentfront CVE debrief

Who should care

Defenders responsible for mcp-from-openapi deployments, particularly those using versions between 2.5.0 and 2.9.0, should assess exposure and prioritize patching or compensating controls.

Why it matters

CVE-2026-115750 is a medium-severity vulnerability in mcp-from-openapi that allows attackers to capture sensitive credentials via cross-origin redirects, potentially leading to unauthorized access or data breaches.

• Potential credential theft via cross-origin redirects
• Possible unauthorized access to sensitive data
• Need for verification of mcp-from-openapi version and patching
• Potential for anomalous traffic patterns indicating exploitation attempts

Technical summary

mcp-from-openapi versions between 2.5.0 and 2.9.0 contain a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers via cross-origin redirects. This vulnerability can lead to unauthorized access or data breaches. Defenders should prioritize verifying exposure of mcp-from-openapi versions between 2.5.0 and 2.9.0, assessing cross-origin redirect vulnerabilities, and applying patches or compensating controls as needed. The vulnerability is a result of safeFetch() forwarding Authorization and Cookie headers on cross-origin redirects, which can be exploited by attackers controlling a spec host or abusing an open redirect.

Defensive priority

Defenders should prioritize verifying exposure of mcp-from-openapi versions between 2.5.0 and 2.9.0, assessing cross-origin redirect vulnerabilities, and applying patches or compensating controls as needed.

Recommended defensive actions

• Verify mcp-from-openapi version and apply patches or updates to version 2.9.0 or later
• Assess cross-origin redirect vulnerabilities and implement compensating controls if necessary
• Monitor for potential exploitation attempts and anomalous traffic patterns
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on a credential exposure vulnerability in mcp-from-openapi versions between 2.5.0 and 2.9.0, allowing attackers to capture Authorization and Cookie headers via cross-origin redirects.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.