Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-58497— Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests

Quick assessment

Affected
olo-dot-io Uni-CLI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Uni-CLI 为用户提供了一个统一的命令行接口，用于管理网站、浏览器、桌面应用程序、本地工具以及 MCP（模型上下文协议）。在 0.225.2 版本之前，Uni-CLI 在回环接口（loopback）上暴露了基于 HTTP 的旧版 JSON-RPC MCP 传输协议，但在将请求路由至相应处理程序之前，并未验证浏览器的 Origin 请求头。 攻击者可利用恶意网页向本地 端点发送 CORS 简单 POST 请求（例如 类型），并将 JSON-RPC 请求体传递给调度器。如果用户已启动本地的 MCP HTTP 传输服

CVSS 8.6 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
olo-dot-io Uni-CLI < 0.225.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-58497

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests
Source: CVE Program / CVE List V5
Vulnerability Description
Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin headers before routing requests. A malicious web page could send a CORS simple POST request, such as text/plain, to the local /mcp endpoint and deliver a JSON-RPC body to the dispatcher. If the user had started the local MCP HTTP transport, that page could drive tools/call requests against the user's local Uni-CLI server. The Streamable HTTP transport already enforced this browser-to-localhost boundary. The legacy stateless HTTP path did not, so the two HTTP transports had drifted. This issue is about the browser-to-localhost boundary; it does not change Uni-CLI's local-code-execution trust model. This issue has been patched in version 0.225.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
olo-dot-io Uni-CLI < 0.225.2 -

II. Public POCs for CVE-2026-58497

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-58497

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-58497 (1)

Vendor Pages for CVE-2026-58497 (1)

IV. Related Vulnerabilities

Same weakness: CWE-346

V. Comments for CVE-2026-58497

No comments yet

Leave a comment