{"vulnerability": "CVE-2026-5997", "sightings": [{"uuid": "93533c83-a604-4e08-a01a-0c1015affd5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5997", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4cbcgyht2i", "content": "", "creation_timestamp": "2026-04-10T02:40:32.883908Z"}, {"uuid": "f64ef08a-42fb-4911-b4b1-018ee8ccef1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5997", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mj4dez4x6f2q", "content": "", "creation_timestamp": "2026-04-10T03:00:31.617248Z"}, {"uuid": "c533353e-bcb4-493c-934e-b7f8c4e66902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5997", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116378175318859979", "content": "", "creation_timestamp": "2026-04-10T03:00:32.134114Z"}, {"uuid": "092f5dca-3544-444f-affb-f3e9b4be7417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5997", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4k3q6xjn27", "content": "", "creation_timestamp": "2026-04-10T05:00:36.132592Z"}, {"uuid": "def7729d-e579-40e9-927f-248fe18c5fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5997", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mj4k3r6hzo2z", "content": "", "creation_timestamp": "2026-04-10T05:00:36.846749Z"}, {"uuid": "84fe3a1c-ccfd-4586-8299-2d62166b64b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5997", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4n3tgc7y2h", "content": "", "creation_timestamp": "2026-04-10T05:54:20.921672Z"}, {"uuid": "87ee1953-5875-4a1e-9d1e-cf60d7aa653e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5997", "type": "seen", "source": "Telegram/dlHjE74YJP60i2H2nGlpzavbl9VTUuqP8EZ9rm2MDed37Y0", "content": "", "creation_timestamp": "2026-04-10T03:17:35.000000Z"}, {"uuid": "41c2739c-c80d-43bf-a512-26c66aee105a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59971", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvblyao4nn25", "content": "CVE-2026-59971 - mysql-mcp-server\nWhen the MySQL MCP Server is run with SSE transport, it does not verify who is sending requests. This means anyone on the network\u2014or a malicious web page that tricks a browser\u2014can run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pip #CVE #infosec", "creation_timestamp": "2026-09-11T22:20:04.484526Z"}, {"uuid": "1a697c28-e9ff-4619-8681-512d15d31940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59971", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvkyqg4m4t2o", "content": "\ud83d\udd34 CVE-2026-59971 - Critical (10)\n\nMySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL da...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-59971/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-15T16:02:20.576269Z"}, {"uuid": "77dc2b52-65c6-4534-ae77-7afe5bdd6ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59971", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvkz3yq54d2j", "content": "\ud83d\udea8 CVE-2026-59971 \u2014 CVSS 10 CRITICAL\n\nMySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-59971\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T16:08:46.575407Z"}, {"uuid": "1dbe0ed2-daf5-4e1a-857b-053e5bbcce49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59973", "type": "seen", "source": "https://gist.github.com/alon710/8bd3e264f91a00f434cd5f27c8d28e71", "content": "# CVE-2026-59973: CVE-2026-59973: High-Severity Server-Side Request Forgery in FrontMCP and mcp-from-openapi\n\n> **CVSS Score:** 8.5\n> **Published:** 2026-09-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-59973\n\n## Summary\nCVE-2026-59973 is a high-severity Server-Side Request Forgery (SSRF) vulnerability in FrontMCP and its underlying OpenAPI parsing library, mcp-from-openapi. The flaw allows authenticated attackers capable of importing or configuring OpenAPI specifications to bypass string-based hostname filtering mechanisms. By employing DNS wildcard loopbacks, HTTP redirects, or IPv4-mapped IPv6 address formatting, attackers can coerce the application into sending HTTP requests to internal networks, loopback adapters, and cloud metadata environments.\n\n## TL;DR\nA validation bypass in FrontMCP and mcp-from-openapi allows authenticated users to execute arbitrary Server-Side Request Forgery (SSRF) attacks against internal interfaces, bypassing existing string-based denylists through DNS wildcards, HTTP redirects, or IPv4-mapped IPv6 addresses.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.5\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n- **Impact Type**: Server-Side Request Forgery\n\n## Affected Systems\n\n- FrontMCP hosted tool generation services\n- Internal networks connected to FrontMCP containers\n- Cloud hosting platform metadata environments (IMDSv1/v2)\n- **frontmcp**: >= 1.2.1 < 1.5.0 (Fixed in: `1.5.0`)\n- **@frontmcp/adapters**: >= 1.2.1 < 1.5.0 (Fixed in: `1.5.0`)\n- **mcp-from-openapi**: >= 2.3.0 < 2.5.0 (Fixed in: `2.5.0`)\n\n## Mitigation\n\n- Upgrade FrontMCP to version >= 1.5.0\n- Upgrade mcp-from-openapi to version >= 2.5.0\n- Disable external schema resolution via empty allowedProtocols rules\n- Implement network egress restrictions on container environments hosting FrontMCP\n\n**Remediation Steps:**\n1. Review npm dependency tree for vulnerable versions of mcp-from-openapi (< 2.5.0) and frontmcp (< 1.5.0).\n2. Execute `npm install frontmcp@1.5.0` or update package.json to point to fixed versions.\n3. Locate initialization files containing `OpenapiAdapter.init` and ensure `refResolution.allowedProtocols` is empty or locked to verified hosts.\n4. Deploy egress firewalls or network security groups to restrict outward container traffic to internal RFC 1918 networks.\n\n## References\n\n- [FrontMCP Security Advisory](https://github.com/agentfront/frontmcp/security/advisories/GHSA-65h7-9wrw-629c)\n- [FrontMCP Release Version 1.5.0](https://github.com/agentfront/frontmcp/releases/tag/v1.5.0)\n- [mcp-from-openapi Release Version 2.5.0](https://github.com/agentfront/mcp-from-openapi/releases/tag/v2.5.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-59973) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-15T16:31:12.041885Z"}]}