2026-07-01 · 2026-Q3
Apify Actors MCP Server Token Exfiltration (CVE-2026-50143)
PrimaryL1CredentialSecondaryL8Output / DestinationL3Tool
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- No
- Actor:
- Attacker
Target
`@apify/actors-mcp-server` (npm), all versions before 0.10.11
Impact
A malicious Apify Actor with a crafted path can exfiltrate the victim's Apify API token; the MCP client automatically attaches the `Authorization: Bearer <APIFY_TOKEN>` header to every outbound connection, so redirecting the client to an attacker host leaks the credential
Root Cause
Unsafe URL construction that concatenates a trusted base URL with an attacker-controlled `webServerMcpPath` value taken from an Actor definition returned by the Apify API (CWE-918 server-side request forgery)