Logo
Retour à la veille

CVE-2026-71424

Publié : 17 août 2026
Modifié : 17 août 2026
Lien officiel NVD
Score CVSS
9.6
CRITICAL

Description détaillée

Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Références et Patchs

https://github.com/onyx-dot-app/onyx/commit/3f3d79d1a7722fdc84a1c61c8aa830d890017e9ehttps://github.com/onyx-dot-app/onyx/commit/4001cedd0a8968723bfe95dd188914ed56777910https://github.com/onyx-dot-app/onyx/commit/b103937888fd5008067c2bb6eb6e5424576394f2https://github.com/onyx-dot-app/onyx/pull/11238https://github.com/onyx-dot-app/onyx/pull/11242https://github.com/onyx-dot-app/onyx/pull/11243https://github.com/onyx-dot-app/onyx/releases/tag/v4.0.0https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822

Dernières Vulnérabilités

CVE-2026-9693

Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via the team threads API.. Mattermost Advisory ID: MMSA-2026-00682

VOIR DÉTAILS

CVE-2026-75587

Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the Server Connectivity (Step-3) diagnostics output. Mattermost Advisory ID: MMSA-2026-00716

VOIR DÉTAILS

CVE-2026-75078

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the argument course results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

VOIR DÉTAILS