{"vulnerability": "ghsa-7hgr-7h44-33w2", "sightings": [{"uuid": "11de5821-d9fa-45b4-a75d-243d3c9d768c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7HGR-7H44-33W2", "type": "seen", "source": "https://gist.github.com/alon710/d948bdbe7f1b3b90439141bced4b12bc", "content": "# GHSA-7HGR-7H44-33W2: GHSA-7HGR-7H44-33W2: Unauthenticated Browser Control via Confused Deputy in camofox-mcp\n\n> **CVSS Score:** High\n> **Published:** 2026-05-19\n> **Full Report:** https://cvereports.com/reports/GHSA-7HGR-7H44-33W2\n\n## Summary\nThe camofox-mcp package prior to version 1.13.2 contains a critical access control vulnerability on its Model Context Protocol (MCP) HTTP transport layer. The server fails to authenticate inbound requests while simultaneously appending an administrative API key to outbound backend requests. This Confused Deputy flaw allows unauthenticated clients to exercise full administrative control over the backend headless browser environment.\n\n## TL;DR\nAn unauthenticated access vulnerability (CWE-306) in the camofox-mcp `/mcp` endpoint enables attackers to hijack the server's internal credentials. This grants unauthorized access to browser control tools. Administrators must upgrade to version 1.13.2 and define the CAMOFOX_HTTP_API_KEY environment variable.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-306 / CWE-441\n- **Attack Vector**: Network\n- **Authentication**: None Required\n- **CVSS 4.0 Score**: High\n- **Exploit Status**: Proof of Concept Available\n- **Impact**: Unauthenticated Administrative Browser Control\n\n## Affected Systems\n\n- camofox-mcp (npm package)\n- Model Context Protocol (MCP) Server Deployments\n- Dockerized Browser Automation Environments\n- **camofox-mcp**: < 1.13.2 (Fixed in: `1.13.2`)\n\n## Mitigation\n\n- Software Upgrade\n- Authentication Configuration\n- Network Segmentation\n- Host-Header Validation\n\n**Remediation Steps:**\n1. Update camofox-mcp to version 1.13.2 via npm install camofox-mcp@latest.\n2. Generate a cryptographically secure random string to serve as the authentication secret.\n3. Set the CAMOFOX_HTTP_API_KEY environment variable using the generated secret.\n4. Verify that the CAMOFOX_HTTP_HOST variable is set to 127.0.0.1 unless external access is strictly required.\n5. If deployed behind a proxy, configure CAMOFOX_HTTP_ALLOWED_HOSTS to explicitly define the allowed domain names.\n\n## References\n\n- [GitHub Advisory GHSA-7HGR-7H44-33W2](https://github.com/advisories/GHSA-7hgr-7h44-33w2)\n- [Fix Commit: 599f56ee40f8062aeca541c251ed1d39fb437f50](https://github.com/redf0x1/camofox-mcp/commit/599f56ee40f8062aeca541c251ed1d39fb437f50)\n- [camofox-mcp Repository](https://github.com/redf0x1/camofox-mcp)\n- [OSV Vulnerability Record](https://osv.dev/vulnerability/GHSA-7hgr-7h44-33w2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-7HGR-7H44-33W2) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-19T20:40:52.000000Z"}]}