This vulnerability affects the addMcpServer function in ChatGPTNextWeb NextChat (<= 2.16.1) and results in improper authorization. Remote attackers can exploit this issue without authentication or user interaction, potentially gaining unauthorized access or performing unauthorized actions. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity), indicating a network attack vector with low complexity and no privileges required. The vendor has not provided any patch or official remediation at this time.

The improper authorization flaw allows remote attackers to bypass access controls in the affected function, potentially leading to unauthorized operations within the NextChat application. Since no privileges or user interaction are required, this could enable attackers to manipulate server-side actions remotely. However, no known exploits in the wild have been reported yet.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's communications for updates and consider restricting access to the affected functionality where possible until a fix is released. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.