CVE-2026-71424criticalCWE-200CWE-863

CVE-2026-71424: falha crítica em onyx-dot-app onyx

Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar onyx

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.6epss 0.5%
Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Produtos afetados
onyx-dot-app · onyx
CVEs relacionadas — onyx-dot-app onyx

No mesmo produto, das mais perigosas para as menos.

CVE-2026-63178MEDIUMOnyx Curator-scope IDOR: any curator can modify membership of arbitrary user groups via unscoped PATCH /manage/admin/user-group/{id} and /add-users leading to cross-group document disclosureEPSS 0.5%CVE-2026-85700HIGHOnyx 4.6.6 Custom Tool Secret Header Disclosure via Tool EndpointsEPSS 0.5%CVE-2026-42276MEDIUMOnyx: IDOR in /chat/stop-chat-session allows any authenticated user to interrupt other users chat sessionsEPSS 0.3%CVE-2026-42277MEDIUMOnyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users filesEPSS 0.2%