Threats tagged 'ghsa-2jqp-6hx7-phh8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.9	CVE-2026-7644ChatGPTNextWeb NextChat · CWE-266 Medium6.92026-05-02GCVE DatabaseCVE-2026-7644 A high-severity vulnerability (CVE-2026-7644) exists in ChatGPTNextWeb NextChat up to version 2.16.1 in the addMcpServer function of app/mcp/actions.ts. This flaw allows improper authorization, enabling remote attackers to exploit the issue without privileges or user interaction. The vulnerability has been publicly disclosed, but no patch or vendor response is currently available. Report on CVE-2026-7644 Vulnerability CWE-266 #ghsa-2jqp-6hx7-phh8	GCVE Database	2026-05-02

Page 1 of 1