{"vulnerability": "CVE-2026-71424", "sightings": [{"uuid": "fe01c103-b1d2-44e6-aca8-8996f25e70f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcsm7ra6a22", "content": "\ud83d\udd34 CVE-2026-71424 - Critical (9.6)\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/serve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71424/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T23:00:54.272093Z"}, {"uuid": "3c747ee0-61e5-4518-b132-efb5db4e7292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gfy45mtzysrmc", "content": "CVE-2026-71424 - Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers\nCVE ID : CVE-2026-71424\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's G...", "creation_timestamp": "2026-08-17T23:41:50.397902Z"}, {"uuid": "4f10f3d9-a768-4290-82cb-7f3bf385be5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcvw3oz5b2p", "content": "CVE-2026-71424 - onyx\nOnyx's API endpoints, used for managing servers, exposed another user's login credentials to anyone with certain access permissions. This issue has been fixed in versions 3.1.10, 3.2.14, and 4.0.0\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#onyx #CVE #infosec", "creation_timestamp": "2026-08-18T00:00:07.899120Z"}, {"uuid": "0aa9f15c-2d98-433a-9830-c5481d862793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcweh45yo2e", "content": "\ud83d\udea8 CVE-2026-71424 \u2014 CVSS 9.6 CRITICAL\n\nOnyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71424\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T00:08:07.777070Z"}]}