Title: @frontmcp, Description: FrontMCP es un framework TypeScript-first para el Protocolo de Contexto de Modelo (MCP). Antes de la versión 2.3.0, la biblioteca mcp-from-openapi utiliza @apidevtools/json-schema-ref-parser para desreferenciar punteros $ref en especificaciones OpenAPI sin configurar ninguna restricción de URL o resolutores personalizados. Una especificación OpenAPI maliciosa que contenga valores $ref que apunten a direcciones de red internas, puntos finales de metadatos en la nube o archivos locales hará que la biblioteca obtenga esos recursos durante la llamada a initialize(). Esto permite ataques de falsificación de petición del lado del servidor (SSRF) y de lectura de archivos locales al procesar especificaciones OpenAPI no confiables. Esta vulnerabilidad se corrigió en la versión 2.3.0.

{"timestamp":"2026-04-09T14:53:12.471902Z","id":"CVE-2026-39885","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"agentfront","product":"frontmcp","versions":[{"version":"< 1.0.4","status":"affected"}]},{"vendor":"@frontmcp","product":"adapters","versions":[{"version":"< 1.0.4","status":"affected"}]},{"vendor":"@frontmcp","product":"sdk","versions":[{"version":"< 1.0.4","status":"affected"}]},{"vendor":"frontmcp","product":"mcp-from-openapi","versions":[{"version":"<  2.3.0","status":"affected"}]}]

OR
          *cpe:2.3:a:agentfront:frontmcp:*:*:*:*:*:node.js:*:* versions up to (excluding) 1.0.4
          *cpe:2.3:a:agentfront:@frontmcp/adapters:*:*:*:*:*:node.js:*:* versions up to (excluding) 1.0.4
          *cpe:2.3:a:agentfront:@frontmcp/sdk:*:*:*:*:*:node.js:*:* versions up to (excluding) 1.0.4
          *cpe:2.3:a:frontmcp:mcp-from-openapi:*:*:*:*:*:node.js:*:* versions up to (excluding) 2.3.0

CISA-ADP: https://github.com/agentfront/frontmcp/security/advisories/GHSA-v6ph-xcq9-qxxj Types: Exploit, Vendor Advisory

GitHub, Inc.: https://github.com/agentfront/frontmcp/releases/tag/v1.0.4 Types: Product

GitHub, Inc.: https://github.com/agentfront/frontmcp/security/advisories/GHSA-v6ph-xcq9-qxxj Types: Exploit, Vendor Advisory

https://github.com/agentfront/frontmcp/security/advisories/GHSA-v6ph-xcq9-qxxj

FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 2.3.0, the mcp-from-openapi library uses @apidevtools/json-schema-ref-parser to dereference $ref pointers in OpenAPI specifications without configuring any URL restrictions or custom resolvers. A malicious OpenAPI specification containing $ref values pointing to internal network addresses, cloud metadata endpoints, or local files will cause the library to fetch those resources during the initialize() call. This enables Server-Side Request Forgery (SSRF) and local file read attacks when processing untrusted OpenAPI specifications. This vulnerability is fixed in 2.3.0.

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-918

https://github.com/agentfront/frontmcp/releases/tag/v1.0.4

https://github.com/agentfront/frontmcp/security/advisories/GHSA-v6ph-xcq9-qxxj