CVE-2026-7644: falha de média gravidade em ChatGPTNextWeb NextChat
ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 6.9epss 0.3%
da publicação à arma
Publicada no NVD2 de mai.
vítimas20 de out.
Apareceu em 1 incidente(s) que apuramos
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
ChatGPTNextWeb · NextChatPoCs públicas encontradas — 1
cve_referencegithub.com/ChatGPTNextWeb/NextChat/issues/6757não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — ChatGPTNextWeb NextChat
No mesmo produto, das mais perigosas para as menos.
CVE-2023-49785CRITICALNextChat vulnerable to Server-Side Request Forgery and Cross-site ScriptingEPSS 83.2%CVE-2026-82639HIGHNextChat 2.15.8 through 2.16.1 OpenAI API Key DisclosureEPSS 0.5%CVE-2026-105238MEDIUMChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgeryEPSS 0.4%CVE-2026-7177MEDIUMChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgeryEPSS 0.4%CVE-2026-7178MEDIUMChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgeryEPSS 0.3%CVE-2026-7643MEDIUMChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policyEPSS 0.2%