CVE-2026-7644
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Ver en NVDAnálisis
NextChat (ChatGPTNextWeb) versions up to 2.16.1 are vulnerable to improper authorization in the MCP server management logic. Remote attackers can exploit this to add unauthorized servers, and with public exploits already in the wild, self-hosted instances should be secured behind authentication or updated as soon as a fix is available.
Severidad
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LCWE-266CWE-285EPSS
Descripción técnica
A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.