AG
Vendor
agentfront
11
CVEs
0
On KEV
2
New 30D
Products
MC8.5
mcp-from-openapi
agentfront
3 CVEs0 on KEV2 new
EN10.0
enclave
agentfront
3 CVEs0 on KEV0 new
FR9.3
frontmcp
agentfront
3 CVEs0 on KEV0 new
FR7.5
@frontmcp/adapters
Agentfront
1 CVEs0 on KEV0 new
FR7.5
@frontmcp/sdk
Agentfront
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115751 New | MC mcp-from-openapi agentfront | 3.7 | Oct 23 | mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname |
| CVE-2026-115750 New | MC mcp-from-openapi agentfront | 3.7 | Oct 23 | mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects |
| CVE-2026-59973 | FR frontmcp agentfront | 8.5 | Sep 15 | mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi |
| CVE-2026-67531 | FR frontmcp agentfront | 9.3 | Aug 5 | FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool |
| CVE-2026-39885 | FR frontmcp agentfront | 7.5 | Apr 8 | FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications |
| CVE-2026-27597 | EN enclave agentfront | 10.0 | Feb 25 | @enclave-vm/core is vulnerable to Sandbox Escape |
| CVE-2026-25533 | EN enclave agentfront | 8.8 | Feb 6 | Enclave has a sandbox escape via infinite recursion and error objects |
| CVE-2026-22686 | EN enclave agentfront | 10.0 | Jan 13 | Sandbox Escape via Host Error Prototype Chain in enclave-vm |