{"uuid": "3c747ee0-61e5-4518-b132-efb5db4e7292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gfy45mtzysrmc", "content": "CVE-2026-71424 - Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers\nCVE ID : CVE-2026-71424\n \n Published : Aug. 17, 2026, 10:17 p.m. | 18\u00a0minutes ago\n \n Description : Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's G...", "creation_timestamp": "2026-08-17T23:41:50.397902Z"}