CVE-2026-115750 | agentfront mcp-from-openapi up to 2.8.x safeFetch cross-domain policy

October 23, 2026 Yanac

A vulnerability was found in agentfront mcp-from-openapi up to 2.8.x. It has been classified as problematic. Affected is the function safeFetch. Performing a manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability is reported as CVE-2026-115750. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More