Vendor

    Agentfront

    8 known vulnerabilities in products by Agentfront, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Agentfront
    CriticalCVE-2026-27597

    @enclave-vm/core is vulnerable to Sandbox Escape

    		10.0
    CriticalCVE-2026-67531

    FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool

    		—
    CriticalCVE-2026-22686

    Sandbox Escape via Host Error Prototype Chain in enclave-vm

    		10.0
    HighCVE-2026-59973

    mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi

    		8.5
    MediumCVE-2026-115751

    mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname

    		3.7
    MediumCVE-2026-115750

    mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects

    		3.7
    HighCVE-2026-39885

    FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications

    		7.5
    HighCVE-2026-25533

    Enclave has a sandbox escape via infinite recursion and error objects

    		8.8

    Products

    Products by Agentfront
    Enclave30
    Frontmcp30
    Mcp-from-openapi30