UpHeron
All vulnerabilities

Servers and applications

CVE-2026-124726

Apache APISIX: openapi-to-mcp tool call can reach an API path the document does not declare

Severity
Medium 6.9
Published
13 Nov 2026
Last changed
13 Nov 2026
Added to UpHeron
13 Nov 2026
Fixed in
3.20.0
Weakness
Relative path traversal (CWE-23)
Attack
Over the network · Only under certain conditions · No login needed · No user action needed
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N
Sources
CVE Program

Description

Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX.

A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before 3.20.0.

Users are recommended to upgrade to version 3.20.0, which fixes the issue.

From the CVE Program.

Affected software

SoftwareAffected versions
Apache APISIXServers and applications · cna:apache software foundation|apache apisix
  • From 3.19.0 before 3.20.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-124726