CVE-2026-71424

Katalog CVE

CVSS 9.6 · Critical EPSS 0,49%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor. Skor CVSS 3.1 9.6 (Critical) menurut github.com.

Deskripsi (NVD)

Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0.

Rincian

Terbit di NVD

17 Agustus 2026

Terakhir diubah

18 September 2026

Status NVD

Deferred

CVSS 3.1

9.6 (Critical), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-863: Incorrect Authorization

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,3% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/onyx-dot-app/onyx/commit/3f3d79d1a7722fdc84a1c61c8aa830d890017e9e
• https://github.com/onyx-dot-app/onyx/commit/4001cedd0a8968723bfe95dd188914ed56777910
• https://github.com/onyx-dot-app/onyx/commit/b103937888fd5008067c2bb6eb6e5424576394f2
• https://github.com/onyx-dot-app/onyx/pull/11238
• https://github.com/onyx-dot-app/onyx/pull/11242
• https://github.com/onyx-dot-app/onyx/pull/11243
• https://github.com/onyx-dot-app/onyx/releases/tag/v4.0.0
• https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822