CVE-2026-7644
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
View on NVDAnalysis
NextChat (ChatGPTNextWeb) versions up to 2.16.1 are vulnerable to improper authorization in the MCP server management logic. Remote attackers can exploit this to add unauthorized servers, and with public exploits already in the wild, self-hosted instances should be secured behind authentication or updated as soon as a fix is available.
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LCWE-266CWE-285EPSS
Technical description
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.