CVE-2026-58497 Details
Description
Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin headers before routing requests. A malicious web page could send a CORS simple POST request, such as text/plain, to the local /mcp endpoint and deliver a JSON-RPC body to the dispatcher. If the user had started the local MCP HTTP transport, that page could drive tools/call requests against the user's local Uni-CLI server. The Streamable HTTP transport already enforced this browser-to-localhost boundary. The legacy stateless HTTP path did not, so the two HTTP transports had drifted. This issue is about the browser-to-localhost boundary; it does not change Uni-CLI's local-code-execution trust model. This issue has been patched in version 0.225.2.
A vulnerability in Uni-CLI versions prior to 0.225.2 allowed the legacy JSON-RPC-over-HTTP MCP transport to be accessed on loopback without proper validation of browser Origin headers. This oversight enabled a malicious web page to send a CORS simple POST request, such as text/plain, to the local /mcp endpoint, delivering a JSON-RPC body to the dispatcher. If the local MCP HTTP transport was active, the page could execute tools/call requests against the user's Uni-CLI server. While the Streamable HTTP transport enforced the necessary browser-to-localhost boundary, the legacy stateless HTTP path did not, creating a discrepancy between the two transports. This vulnerability pertains to the browser-to-localhost boundary and does not alter Uni-CLI's local code execution trust model.
Users are advised to upgrade to Uni-CLI version 0.225.2 or later. If an immediate upgrade is not possible, the legacy HTTP MCP transport should not be exposed to browser-originated traffic; instead, use the default stdio transport or the Streamable HTTP transport.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 23, 2026CISA-ADP
Assessed Oct 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/olo-dot-io/Uni-CLI/releases/tag/v0.225.2 | [email protected] | Release NotesVendor |
| https://github.com/olo-dot-io/Uni-CLI/security/advisories/GHSA-v3f4-w7r7-v3hm | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-346 | Origin Validation Error | [email protected] |
| CWE-352 | Cross-Site Request Forgery (CSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| olo-dot-io Uni-CLI | < 0.225.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 23, 2026 | CVE Modified | CISA-ADP |
| Oct 23, 2026 | New CVE Received | [email protected] |