{"data":{"id":"45961246-b9dd-4e60-8570-1e8d09d2f907","title":"GHSA-jwp7-wg77-3w9v: Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching","summary":"The fetch-apify-docs tool in the Apify Model Context Protocol (MCP) server checks URLs against a domain allowlist with String.startsWith() instead of comparing hostnames. An attacker can use a URL such as https://docs.apify.com.evil.com/ to pass the check and have the tool return attacker-controlled page content to the LLM. The advisory notes this enables prompt injection and can direct the LLM to use a victim's _meta.apifyToken in call-actor invocations.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-jwp7-wg77-3w9v","publishedAt":"2026-05-19T16:34:34.000Z","cveId":"CVE-2026-46341","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","supply_chain"],"issueType":"vulnerability","affectedPackages":["@apify/actors-mcp-server@< 0.9.21 (fixed: 0.9.21)"],"affectedPackageNames":["@apify/actors-mcp-server"],"affectedPackageRefs":["npm:@apify/actors-mcp-server"],"affectedVendors":[],"affectedVendorsRaw":["Apify Model Context Protocol (MCP) server","Apify docs","LLM tool fetch-apify-docs"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00234,"epssCheckedAt":"2026-11-07T00:12:14.272Z","kevDateAdded":null,"advisoryAliases":["GHSA-jwp7-wg77-3w9v"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-19T16:34:34.000Z","fixReleasedAt":"2026-05-04T08:36:15.116Z","daysToFix":-15,"fixCheckedAt":"2026-10-29T21:35:43.364Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0051"],"fixes":[{"ecosystem":"npm","name":"@apify/actors-mcp-server","fixedVersion":"0.9.21","matchedVersion":"0.9.21","fixReleasedAt":"2026-05-04T08:36:15.116Z","daysToFix":-15,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:35:43.217Z"}]}}