{"data":{"id":"8346a367-2aae-497d-892d-0897db37f603","title":"CVE-2026-50143: The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation","summary":"The Apify MCP server (a tool that lets AI agents scrape and extract data from websites) had a vulnerability where malicious actors could redirect connections to fake servers and steal API tokens (security credentials that grant access to accounts and data). An attacker needed to trick someone into using their malicious actor for this to work.","solution":"This issue is fixed in version 0.10.11.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-50143","publishedAt":"2026-08-18T18:17:53.227Z","cveId":"CVE-2026-50143","cweIds":["CWE-918"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Apify"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-18T18:17:53.227Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}