Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 2.3.0, the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser to dereference $ref pointers in OpenAPI specifications without configuring any URL restrictions or custom resolvers. A malicious OpenAPI specification containing $ref values pointing to internal network addresses, cloud metadata endpoints, or local files will cause the library to fetch those resources during the initialize() call. This enables Server-Side Request Forgery (SSRF) and local file read attacks when processing untrusted OpenAPI specifications. This vulnerability is fixed in 2.3.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-08 | 2 | Disclosure2 |
| 2026-09-13 | 1 | Patch1 |
CVE-2026-39885 FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 2.3.0, the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser t… https://www.cve.org/CVERecord?id=CVE-2026-39885
Post summary
The text announces CVE‑2026‑39885, noting it affects the FrontMCP mcp‑from‑openapi library prior to version 2.3.0, but provides no further technical, exploit, or patch details.
CVE-2026-59973 isn't new SSRF — bypass of mcp-from-openapi's hostname denylist (CVE-2026-39885). http://nip.io→loopback, redirects, ::ffff:127.0.0.1 still hit. Floor ≥2.5.0 (resolve+pin+redirect revalidate) or allowedProtocols:[]. String denylists ≠ SSRF fixes. https://securelayer7.net/lab/cve-2026-59973-mcp-from-openapi-ssrf-filter-bypass
Post summary
The tweet describes a hostname denylist bypass in mcp-from-openapi (CVE-2026-59973) and notes that upgrading to version ≥2.5.0 or clearing allowedProtocols mitigates the issue.
🚨*CVE* CVE-2026-39885 FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 2.3.0, the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser t… https://www.cve.org/CVERecord?id=CVE-2026-39885 ----- Traducción: CVE-2026-39885 Fro… http://infoflow.cloud`
Post summary
The tweet references CVE-2026-39885 tied to the FrontMCP framework and notes a library dependency issue before version 2.3.0, but it provides no proof‑of‑concept, exploit, patch, or evidence of active exploitation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | agentfront | \@frontmcp\/adapters | - | node.js | - |
| App | agentfront | \@frontmcp\/sdk | - | node.js | - |
| App | agentfront | frontmcp | - | node.js | - |
| App | frontmcp | mcp-from-openapi | - | node.js | - |