AI agent vulnerability · Other MCP servers and tools

GHSA-x7cf-6gp3-q5f8: Duplicate Advisory: MCP Streamable HTTP redirects could forward configured custom headers to another origin

mediumCVSS 4.0 6.0 · 3.1 7.1

This advisory was withdrawn on Jun 17, 2026. The publisher no longer considers it a valid vulnerability.

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-rjxq-qqhf-8hwh. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects.

Published Jun 16, 2026 · Updated Jun 17, 2026

Affected packages

openclaw

Ecosystem: PyPI
Affected: < 2026.5.12
Fixed in: No patched version yet
Check: pip show openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-rjxq-qqhf-8hwh. This link is maintained to preserve external references.

Original Description

OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects. Attackers controlling or compromising an MCP endpoint can redirect requests to exfiltrate sensitive headers like API keys or tenant-routing credentials to attacker-controlled origins.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries