2026-07-01 · 2026-Q3
Apify Actors MCP Server Token Exfiltration (CVE-2026-50143)
Should this run hold this key at all?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- No
- Actor
- Attacker
Target
`@apify/actors-mcp-server` (npm), all versions before 0.10.11
Impact
A malicious Apify Actor with a crafted path can exfiltrate the victim's Apify API token; the MCP client automatically attaches the `Authorization: Bearer <APIFY_TOKEN>` header to every outbound connection, so redirecting the client to an attacker host leaks the credential
Root cause
Unsafe URL construction that concatenates a trusted base URL with an attacker-controlled `webServerMcpPath` value taken from an Actor definition returned by the Apify API (CWE-918 server-side request forgery)
CVE
Sources
Catalog
Cite this: AgentProv incident record: Apify Actors MCP Server Token Exfiltration (CVE-2026-50143) (2026-07-01). https://agentprov.com/incidents/2026-07-01-apify-actors-mcp-server-token-exfiltration-cve-2026-50143
Related
- Also L1 · 2026-10-21LiteLLM 1.107.0 on PyPI and Docker Ships a Credential Stealer That Runs at Every Python StartupL1Credential
- Also L1 · 2026-10-17OpenCode Console Breach Exposes Users' Stored OpenAI, Anthropic, and Google API KeysL1Credential
- Also L1 · 2026-10-13IBM MCP Context Forge Shipped a Known JWT Secret, Letting Anyone Mint Platform Admin Tokens (CVE-2026-53709)L1Credential