Threats affecting pkg:github/agentfront/frontmcp

CVE-2026-67531 is a critical remote code execution vulnerability in the agentfront frontmcp framework prior to version 1.5.7. It arises from improper control of code generation due to exposure of live host Zod schema instances in sandboxed scripts. This allows an attacker to escape the sandbox and execute arbitrary code with the server user's privileges, potentially exposing sensitive secrets and credentials. The vulnerability is fixed in version 1.5.7.

CVE-2026-39885 is a Server-Side Request Forgery (SSRF) vulnerability in the frontmcp product by agentfront, specifically in versions prior to 1.0.4. The vulnerability arises because the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser to dereference $ref pointers in OpenAPI specifications without restricting URLs or using custom resolvers. This allows malicious OpenAPI specs to cause the server to fetch internal network resources, cloud metadata endpoints, or local files during initialization, enabling SSRF and local file read attacks. The vulnerability has a high severity with a CVSS score of 7.5. No official patch or remediation level is explicitly stated in the provided data, but the description notes the issue is fixed in version 2.3.0 of the framework, which suggests upgrading to a fixed version is the recommended mitigation.