{"data":{"id":"6c71bd61-c3f4-45c0-bae1-11f1ec643c2a","title":"CVE-2026-65957: Helio is an MCP proxy that sits between AI agents and the tools they use. Prior to version 0.8.0, the dashboard…","summary":"Helio, an MCP proxy that sits between AI agents and their tools, is affected by CVE-2026-65957 in versions prior to 0.8.0. Its dashboard sideband (default 127.0.0.1:3100) validated CORS origins by matching hostname string prefixes such as 10., 172.16. to 172.31., and 192.168., instead of validating an IP address. Public DNS names like 192.168.attacker.com therefore passed the check and were echoed in Access-Control-Allow-Origin.","solution":"This issue has been patched in version 0.8.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-65957","publishedAt":"2026-11-11T21:16:46.243Z","cveId":"CVE-2026-65957","cweIds":["CWE-346","CWE-942"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Helio","MCP proxy"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Helio dashboard CORS origin validation bypass via private-network prefix match","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00222,"epssCheckedAt":"2026-11-12T18:09:38.910Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-12T00:10:53.436Z","patchAvailable":null,"disclosureDate":"2026-11-11T21:16:46.243Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}