Apify MCP Server up to 0.10.10 URL Verification src/mcp/actors.ts getActorMCPServerURL webServerMcpPath redirect

Summaryinfo

A vulnerability categorized as problematic has been discovered in Apify MCP Server up to 0.10.10. The impacted element is the function getActorMCPServerURL of the file src/mcp/actors.ts of the component URL Verification. Executing a manipulation of the argument webServerMcpPath can lead to redirect. This vulnerability is tracked as CVE-2026-50143. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability has been found in Apify MCP Server up to 0.10.10 and classified as problematic. This vulnerability affects the function getActorMCPServerURL of the file src/mcp/actors.ts of the component URL Verification. The manipulation of the argument webServerMcpPath with an unknown input leads to a redirect vulnerability. The CWE definition for the vulnerability is CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. As an impact it is known to affect integrity. CVE summarizes:

The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL with the attacker-controlled webServerMcpPath from an Actor definition without verifying the resulting origin, allowing a malicious Actor publisher to use a userinfo-style authority value to redirect connectMCPClient to a third-party host. The call-actor, fetch-actor-details, and actor-mcp tool-loading paths pass this URL to transports in src/mcp/client.ts that attach the victim Authorization bearer token, exposing the Apify API token and enabling access to Actors, stored data, and billable compute. A victim must invoke or inspect the attacker-controlled Actor. This issue is fixed in version 0.10.11.

The advisory is available at github.com. This vulnerability was named CVE-2026-50143 since 06/03/2026. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1204.001 by the MITRE ATT&CK project.

Upgrading to version 0.10.11 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Apify

Name

• MCP Server

Version

• 0.10.0
• 0.10.1
• 0.10.2
• 0.10.3
• 0.10.4
• 0.10.5
• 0.10.6
• 0.10.7
• 0.10.8
• 0.10.9
• 0.10.10

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion