CVE-2026-50143
Received Received - Intake

Apify MCP Server URL Origin Validation Bypass

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: GitHub, Inc.

Description
The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL with the attacker-controlled webServerMcpPath from an Actor definition without verifying the resulting origin, allowing a malicious Actor publisher to use a userinfo-style authority value to redirect connectMCPClient to a third-party host. The call-actor, fetch-actor-details, and actor-mcp tool-loading paths pass this URL to transports in src/mcp/client.ts that attach the victim Authorization bearer token, exposing the Apify API token and enabling access to Actors, stored data, and billable compute. A victim must invoke or inspect the attacker-controlled Actor. This issue is fixed in version 0.10.11.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-50143
EUVD
EUVD-2026-61136

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
apify mcp_server 0.10.11

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Apify MCP server (CVE-2026-50143) involves improper URL construction where the webServerMcpPath from an Actor definition is concatenated without validation. Attackers can craft malicious paths like @attacker.tld/mcp to redirect connections to third-party hosts, exposing the victim's Apify API token via the Authorization header.

Detection Guidance

Check the version of the Apify MCP server installed on your system. If it is below 0.10.11, the vulnerability is present. Run: npm list @apify/actors-mcp-server. If the version is older than 0.10.11, update immediately.

Impact Analysis

If exploited, this vulnerability allows attackers to steal your Apify API token, granting access to your Actors, stored data, and billable compute resources. A victim must invoke or inspect a malicious Actor for the attack to succeed.

Mitigation Strategies

Upgrade the Apify MCP server to version 0.10.11 or later. Remove or disable any untrusted Actors that may have been installed. Review Actor definitions for suspicious webServerMcpPath values containing @, //, or other authority manipulation patterns.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-50143. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart