PT-2026-42037 · Npm+2 · @Apify/Actors-Mcp-Server+1
CVE-2026-46341
·
Published
2026-05-19
·
Updated
2026-07-16
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Apify MCP server versions prior to 0.9.21
Description
The
fetch-apify-docs tool in src/tools/common/fetch apify docs.ts improperly validates allowlisted documentation domains using String.startsWith() instead of comparing the URL hostname. This allows an attacker to bypass the ALLOWED DOC DOMAINS check by using URLs such as https://docs.apify.com.evil.com/ or https://docs.apify.com@evil.com/. Once bypassed, the tool fetches arbitrary web content and returns it as markdown to the Large Language Model (LLM), creating a prompt injection vector. This can lead to the LLM following malicious instructions, security boundary violations, limited Server-Side Request Forgery (SSRF), or account compromise by manipulating the meta.apifyToken in subsequent call-actor invocations.Recommendations
Update Apify MCP server to version 0.9.21.
As a temporary workaround, restrict the use of the
fetch-apify-docs tool until the update is applied.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
@Apify/Actors-Mcp-Server
Apify-Mcp-Server