Vulnerabilities in agentfront
8 resultsCVE-2026-27597CRITICAL@enclave-vm/core is vulnerable to Sandbox EscapeEPSS 1.0%CVE-2026-22686CRITICALSandbox Escape via Host Error Prototype Chain in enclave-vmEPSS 0.8%CVE-2026-67531CRITICALFrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getToolEPSS 0.7%CVE-2026-39885HIGHFrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI SpecificationsEPSS 0.4%CVE-2026-59973HIGHmcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapiEPSS 0.4%CVE-2026-25533MEDIUMEnclave has a sandbox escape via infinite recursion and error objectsEPSS 0.3%CVE-2026-115751MEDIUMmcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot HostnameEPSS 0.3%CVE-2026-115750MEDIUMmcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin RedirectsEPSS 0.2%