CVE-2026-115750: mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch() forwards them on cross-origin redirects. Attackers controlling a spec host or abusing an open redirect can redirect fromURL() spec requests to their own origin to steal bearer tokens or cookies.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using mcp-from-openapi versions 2.5.0 through versions before 2.9.0 are affected when fromURL() retrieves a specification and the request includes Authorization or Cookie headers.
What does an attacker need to exploit the credential exposure?
The attacker must be able to control the specification host or cause the specification request to follow an open redirect to an origin they control. The vulnerable safeFetch() behavior then forwards Authorization and Cookie headers across that cross-origin redirect.
What information could be exposed?
Bearer tokens and cookies sent with the fromURL() specification request may be captured by the redirected-to attacker-controlled origin. The provided impact information identifies confidentiality impact only; no integrity or availability impact is stated.