{"vulnerability": "CVE-2026-67531", "sightings": [{"uuid": "8e0a0d80-7cac-446b-a2e0-491f3925970d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67531", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117045620857763460", "content": "CVE-2026-67531 (CRITICAL): agentfront frontmcp <1.5.7 suffers a code injection flaw enabling remote code execution and theft of secrets. Upgrade to v1.5.7+ ASAP. https://radar.offseq.com/threat/cve-2026-67531-cwe-94-improper-control-of-generation-of-code-code-injection-in-agentfront-frontmcp-2c28d3d3312eb9f5 #OffSeq #Vulnerability #RCE #InfoSec #CVE2026", "creation_timestamp": "2026-08-06T00:00:40.487242Z"}, {"uuid": "dc6ad7d2-05c8-4114-af40-803634b81e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67531", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mseqe45ddk2j", "content": "CVE-2026-67531 (CRITICAL): agentfront frontmcp <1.5.7 lets attackers run code on your server \u2014 secrets at risk. Upgrade to 1.5.7+ without delay. https://radar.offseq.com/threat/cve-2026-67531-cwe-94-improper-control-of-generation-of-code-code-injection-in-agentfront-frontmcp-2c28d3d3312eb9f5 #Off...", "creation_timestamp": "2026-08-06T00:00:42.242821Z"}, {"uuid": "6ffbef71-5447-490d-99d8-b69c813a3501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mseukvp33t2o", "content": "CVE-2026-67531\nA security issue in FrontMCP versions prior to 1.5.7 allows malicious scripts to access and execute code on the server, potentially exposing sensitive data such as OAuth client secrets, database credentials,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T01:16:06.714769Z"}, {"uuid": "15568fd4-13b3-4044-8e52-385987e5c17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6ezh3hvhio52s", "content": "CVE-2026-67531 - FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool\nCVE ID : CVE-2026-67531\n \n Published : Aug. 6, 2026, 12:16 a.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : FrontMCP is a TypeScript-first framework for the Model Context Proto...", "creation_timestamp": "2026-08-06T01:57:25.862879Z"}, {"uuid": "29c6cfc7-80bd-46d9-848d-47d2f4f61ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67531", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msg2doqp4y2u", "content": "CVE-2026-67531\nA security issue in FrontMCP allows unauthenticated users to execute code on the server, potentially exposing sensitive information like passwords and authentication keys. This issue has been fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T12:32:04.675060Z"}]}