| शीर्षक | ChatGPTNextWeb NextChat 2.16.1 Unauthenticated Remote Code Execution |
|---|
| विवरण | A critical unauthenticated Remote Code Execution (RCE) vulnerability exists in NextChat (ChatGPT-Next-Web) version 2.16.1. The addMcpServer function in app/mcp/actions.ts is exposed as a Next.js Server Action without any authentication, authorization, or feature-flag gate. An unauthenticated remote attacker can send a single HTTP POST request to the application root with an attacker-controlled command and args payload, causing the server to spawn an arbitrary child process. This grants the attacker full operating system command execution as the server process user, enabling complete server compromise, exfiltration of all API keys and secrets, file system access, and lateral network movement.
The Server Action identifier is embedded in the publicly-served client-side JavaScript bundle, making discovery trivial. No authentication, access code, API key, or user interaction is required. The vulnerability functions regardless of whether the ENABLE_MCP environment variable is set. |
|---|
| स्रोत | ⚠️ https://github.com/ChatGPTNextWeb/NextChat/issues/6757 |
|---|
| उपयोगकर्ता | Yu.Bao (UID 97439) |
|---|
| सबमिशन | 17/04/2026 08:27 AM (6 महीनों पहले) |
|---|
| संयम | 01/05/2026 06:34 PM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 360756 [ChatGPTNextWeb NextChat तक 2.16.1 app/mcp/actions.ts addMcpServer अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|