Potential Vulnerability in Apify MCP Server Affecting AI Data Extraction
CVE-2026-46341

6.1MEDIUM

Key Information:

Vendor

Apify

Status
Apify-mcp-server
Vendor
CVE Published:
16 July 2026

What is CVE-2026-46341?

The Apify MCP server, designed for AI agents to extract data from websites, has a vulnerability in its fetch-apify-docs tool prior to version 0.9.21. The tool improperly validates allowed documentation domains using String.startsWith() instead of performing a proper URL hostname comparison. This oversight allows attackers to use controlled URLs, such as 'https://docs.apify.com.evil.com/' and 'https://docs.apify.com@evil.com/', to bypass security checks. Consequently, this can lead to the unintentional returning of arbitrary content, potentially compromising data integrity and security for users leveraging the Apify service for automation tasks. The issue was addressed and fixed in version 0.9.21.

Affected Version(s)

apify-mcp-server < 0.9.21

References

https://github.com/apify/apify-mcp-server/security/adviso...
x_refsource_CONFIRM
https://github.com/apify/apify-mcp-server/pull/781
x_refsource_MISC
https://github.com/apify/apify-mcp-server/commit/e39bdee5...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.