CVE-2026-50143

CVE-2026-50143 · Actor MCP path authority injection leaks Apify token

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL with the attacker-controlled webServerMcpPath from an Actor definition without verifying the resulting origin, allowing a malicious Actor publisher to use a userinfo-style authority value to redirect connectMCPClient to a third-party host. The call-actor, fetch-actor-details, and actor-mcp tool-loading paths pass this URL to transports in src/mcp/client.ts that attach the victim Authorization bearer token, exposing the Apify API token and enabling access to Actors, stored data, and billable compute. A victim must invoke or inspect the attacker-controlled Actor. This issue is fixed in version 0.10.11.

CVSS 8.1 · High · EPSS 0.5% · Fix available

Published

2026-08-18T17:51:18.888Z

Updated

2026-08-18T19:30:31.747Z

Stack: node

Check your server →