Description
Onyx is an open-source AI platform. Prior to 3.1.10, 3.2.14, and 4.0.0, Onyx's GET /api/mcp/servers and GET /api/mcp/servers/persona/{persona_id} endpoints expose another user's OAuth Authorization header because OnyxTokenStorage.set_tokens and OnyxTokenStorage.set_client_info in backend/onyx/server/features/mcp/api.py copy per-user tokens into a shared admin MCPConnectionConfig row and _db_mcp_server_to_api_mcp_server returns that row through auth_template.headers to any BASIC_ACCESS user. This issue is fixed in versions 3.1.10, 3.2.14, and 4.0.0.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
onyx-dot-app onyx
< 3.1.10affected>= 3.2.0, < 3.2.14affected>= 3.3.0-beta.0, < 4.0.0affected
References
- https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822 ↗
- https://github.com/onyx-dot-app/onyx/pull/11238 ↗
- https://github.com/onyx-dot-app/onyx/pull/11242 ↗
- https://github.com/onyx-dot-app/onyx/pull/11243 ↗
- https://github.com/onyx-dot-app/onyx/commit/3f3d79d1a7722fdc84a1c61c8aa830d890017e9e ↗
- https://github.com/onyx-dot-app/onyx/commit/4001cedd0a8968723bfe95dd188914ed56777910 ↗
- https://github.com/onyx-dot-app/onyx/commit/b103937888fd5008067c2bb6eb6e5424576394f2 ↗
- https://github.com/onyx-dot-app/onyx/releases/tag/v4.0.0 ↗