Threats tagged 'brew-omnara-cve-2026-32871'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.9%	CVE-2026-32871Omnara · FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability Critical10.0EPSS 0.9%2026-08-13GCVE DatabaseCVE-2026-32871 A critical vulnerability (CVE-2026-32871) exists in Omnara's FastMCP OpenAPI Provider where path parameters are substituted into URL templates without URL encoding. This allows an attacker to inject path traversal sequences (e.g., '../') that are resolved by urljoin(), enabling authenticated Server-Side Request Forgery (SSRF) to access arbitrary backend endpoints with the MCP provider's authorization context. EPSS 0.9%Report on CVE-2026-32871 Vulnerability #brew-omnara-cve-2026-32871 #homebrew	GCVE Database	2026-08-13

Page 1 of 1