{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-124726","assignerOrgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","state":"PUBLISHED","assignerShortName":"apache","dateReserved":"2026-11-09T11:18:05.786Z","datePublished":"2026-11-13T17:49:21.949Z","dateUpdated":"2026-11-13T23:05:05.191Z"},"containers":{"cna":{"providerMetadata":{"orgId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","shortName":"apache","dateUpdated":"2026-11-13T17:49:21.949Z"},"title":"Apache APISIX: openapi-to-mcp tool call can reach an API path the document does not declare","problemTypes":[{"descriptions":[{"description":"CWE-23: Relative Path Traversal, with CWE-441: Unintended Proxy or Intermediary","lang":"en","cweId":"CWE-23","type":"CWE"}]}],"source":{"discovery":"UNKNOWN"},"affected":[{"vendor":"Apache Software Foundation","product":"Apache APISIX","packageURL":"pkg:software-id/apache.org/apisix","versions":[{"status":"affected","version":"3.19.0","lessThan":"3.20.0","versionType":"semver"}],"defaultStatus":"unaffected"}],"descriptions":[{"value":"Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX.\n\n\n\nA caller of the MCP endpoint can invoke endpoints the OpenAPI document\nnever declared, under the declared tool's HTTP method, using the credentials the\nRoute adds. This issue affects Apache APISIX: from 3.19.0 before 3.20.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue.","lang":"en","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX.</p><p><span>A caller of the MCP endpoint can invoke endpoints the OpenAPI document\nnever declared, under the declared tool's HTTP method, using the credentials the\nRoute adds. </span>This issue affects Apache APISIX: from 3.19.0 before 3.20.0.</p><p>Users are recommended to upgrade to version 3.20.0, which fixes the issue.</p>"}]}],"references":[{"url":"https://lists.apache.org/thread/1kodokhflvr51sc1qv985om3s6mozybg","tags":["vendor-advisory"]}],"metrics":[{"scenarios":[{"lang":"en","value":"GENERAL"}],"format":"CVSS","cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","subIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"MEDIUM","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N"}}],"credits":[{"lang":"en","value":"Javier García Herrera","type":"reporter"},{"lang":"en","value":"shreemaan-abhishek","type":"coordinator"},{"lang":"en","value":"shreemaan-abhishek","type":"remediation developer"}],"x_generator":{"engine":"Vulnogram 1.0.3"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-11-13T19:49:40.828881Z","id":"CVE-2026-124726","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-11-13T20:02:35.162Z"}},{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2026/11/13/11"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-11-13T23:05:05.191Z"}}]}}