{"affected":[{"defaultStatus":"unaffected","ecosystem":"software-id","packageName":"apache.org/apisix","product":"Apache APISIX","source":"CNA: apache","vendor":"Apache Software Foundation","versions":[{"lessThan":"3.20.0","status":"affected","version":"3.19.0","versionType":"semver"}]}],"cveId":"CVE-2026-124726","cwes":["CWE-23"],"description":"Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX.\n\n\n\nA caller of the MCP endpoint can invoke endpoints the OpenAPI document\nnever declared, under the declared tool's HTTP method, using the credentials the\nRoute adds. This issue affects Apache APISIX: from 3.19.0 before 3.20.0.\n\n\n\nUsers are recommended to upgrade to version 3.20.0, which fixes the issue.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.9,"severity":"medium","source":"CNA: apache","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N","version":"4.0"}],"modifiedAt":1794592161949,"publishedAt":1794592161949,"references":[{"source":"CNA: apache","tags":["vendor-advisory"],"url":"https://lists.apache.org/thread/1kodokhflvr51sc1qv985om3s6mozybg"}],"remediation":[],"revision":"8b98a0406899147b7abeda3ca5bab3663663f277459e3df77f202f6f81e05970","sources":[{"modifiedAt":1794592161949,"name":"CNA: apache","retrievedAt":1794593348600,"url":"https://www.cve.org/CVERecord?id=CVE-2026-124726"}],"ssvc":null,"status":"published","title":"Apache APISIX: openapi-to-mcp tool call can reach an API path the document does not declare","updatedAt":1794593348600}