{"id":"EUVD-2026-61136","enisaUuid":"75fe31d2-0af0-3a51-9383-df559a2b6e49","description":"The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL with the attacker-controlled webServerMcpPath from an Actor definition without verifying the resulting origin, allowing a malicious Actor publisher to use a userinfo-style authority value to redirect connectMCPClient to a third-party host. The call-actor, fetch-actor-details, and actor-mcp tool-loading paths pass this URL to transports in src/mcp/client.ts that attach the victim Authorization bearer token, exposing the Apify API token and enabling access to Actors, stored data, and billable compute. A victim must invoke or inspect the attacker-controlled Actor. This issue is fixed in version 0.10.11.","datePublished":"Aug 18, 2026, 5:51:18 PM","dateUpdated":"Aug 18, 2026, 7:30:31 PM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://github.com/apify/apify-mcp-server/security/advisories/GHSA-6gr2-qh89-hxwm\nhttps://github.com/apify/apify-mcp-server/pull/927\nhttps://github.com/apify/apify-mcp-server/commit/ef686d77da3d3c86c30b2ae24218d756aa38e09c\nhttps://github.com/apify/apify-mcp-server/releases/tag/v0.10.11\n","aliases":"CVE-2026-50143\nGHSA-6gr2-qh89-hxwm\n","assigner":"GitHub_M","epss":0.49,"enisaIdProduct":[{"id":"d8ab21ea-f076-38a9-bc9e-c92a4b49dc83","product":{"name":"apify-mcp-server","vendor":{"name":"apify"}},"product_version":"\u003c 0.10.11"}],"enisaIdVendor":[{"id":"7a624b0f-fdea-3831-8773-6b8f562edc76","vendor":{"name":"apify"}}],"enisaIdVulnerability":[{"id":"0980f211-9389-3501-a7a9-f0bbac8f2284","vulnerability":{"id":"GHSA-6gr2-qh89-hxwm","description":"Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token","datePublished":"Jul 1, 2026, 10:02:15 PM","dateUpdated":"Jul 1, 2026, 10:02:15 PM","baseScore":0.0,"references":"https://github.com/apify/apify-mcp-server/security/advisories/GHSA-6gr2-qh89-hxwm\nhttps://github.com/apify/apify-mcp-server\n","enisa_id":"EUVD-2026-61136\n","aliases":"GHSA-6gr2-qh89-hxwm\nCVE-2026-50143\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"3d204553-bfd4-3374-8814-4b6e00b64201","vulnerability":{"id":"CVE-2026-50143","description":"The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL with the attacker-controlled webServerMcpPath from an Actor definition without verifying the resulting origin, allowing a malicious Actor publisher to use a userinfo-style authority value to redirect connectMCPClient to a third-party host. The call-actor, fetch-actor-details, and actor-mcp tool-loading paths pass this URL to transports in src/mcp/client.ts that attach the victim Authorization bearer token, exposing the Apify API token and enabling access to Actors, stored data, and billable compute. A victim must invoke or inspect the attacker-controlled Actor. This issue is fixed in version 0.10.11.","datePublished":"Aug 18, 2026, 5:51:18 PM","dateUpdated":"Aug 18, 2026, 7:30:31 PM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://github.com/apify/apify-mcp-server/security/advisories/GHSA-6gr2-qh89-hxwm\nhttps://github.com/apify/apify-mcp-server/pull/927\nhttps://github.com/apify/apify-mcp-server/commit/ef686d77da3d3c86c30b2ae24218d756aa38e09c\nhttps://github.com/apify/apify-mcp-server/releases/tag/v0.10.11\n","enisa_id":"EUVD-2026-61136\n","assigner":"GitHub_M","epss":0.49,"dataProcessed":"Nov 3, 2026, 7:15:30 AM","vulnerabilityProduct":[{"id":"bd952a3c-bfe9-3171-8a11-0fd215d98a23","product":{"name":"apify-mcp-server","vendor":{"name":"apify"}},"product_version":"\u003c 0.10.11"}],"vulnerabilityVendor":[{"id":"cd956db8-1308-39ca-a611-8096dd2f1724","vendor":{"name":"apify"}}]}}],"enisaIdAdvisory":[]}