CVE-2026-85700— Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints
Quick assessment
Affected
onyx-dot-app onyx
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Onyx 4.6.6 未能正确限制对存储在 中的自定义工具凭据的访问，使得任何经过身份验证的用户都可以读取由管理员定义的 API 密钥。拥有基础身份验证权限的攻击者可以通过调用 或 端点，获取明文格式的授权头（authorization headers）以及第三方 API 凭据，并直接使用这些凭据访问上游 API。
Possible ATT&CK Techniques 3 AI
T1078 · Valid Accounts T1110 · Brute Force T1529 · System Shutdown/RebootAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| onyx-dot-app | onyx | ≤ 4.6.6 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85700
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Onyx 4.6.6 Custom Tool Secret Header Disclosure via Tool Endpoints
Source: CVE Program / CVE List V5
Vulnerability Description
Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read admin-defined API keys. Attackers with basic authentication can call GET /tool/{tool_id} or GET /tool endpoints to retrieve plaintext authorization headers and third-party API credentials, then use them to directly access upstream APIs.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的凭证保护机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| onyx-dot-app | onyx | 0 ~ 4.6.6 | - |
|
II. Public POCs for CVE-2026-85700
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85700
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-85700 (1)
Vendor Advisories for CVE-2026-85700 (1)
Other References for CVE-2026-85700 (2)
IV. Related Vulnerabilities
Same product: onyx
-
CVE-2026-63178
Onyx Curator-scope IDOR: any curator can modify membership o -
CVE-2026-71424
Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for -
CVE-2026-42277
Onyx: IDOR in /chat/file/{file_id} allows any authenticated -
CVE-2026-42276
Onyx: IDOR in /chat/stop-chat-session allows any authenticat -
CVE-2025-7894
Onyx Chat Interface a3_generate_simple_sql.py generate_simpl
Same vendor: onyx-dot-app
-
CVE-2026-63178
Onyx Curator-scope IDOR: any curator can modify membership o -
CVE-2026-71424
Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for -
CVE-2026-42277
Onyx: IDOR in /chat/file/{file_id} allows any authenticated -
CVE-2026-42276
Onyx: IDOR in /chat/stop-chat-session allows any authenticat
Same weakness: CWE-522
-
CVE-2026-86175
NetBox through 4.7.0 Credential Disclosure via REST and Grap -
CVE-2026-8862
Vulnerabilities exists in IBM Netezza Software -
CVE-2026-75136
UpSignOn < 7.19.0 Biometric Key Exposure via Windows Passwor -
CVE-2026-55856
MariaDB Connector/J: Cleartext password disclosure to a MITM -
CVE-2026-82288
Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/c
V. Comments for CVE-2026-85700
No comments yet