How many CVEs does agentfront have?

agentfront has 5 published CVE records since 2026, including 5 in the last two years.

How many agentfront CVEs are in CISA KEV?

None of agentfront's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which agentfront products have the most CVEs?

The agentfront products with the most published CVEs are enclave, enclave-vm, frontmcp, @frontmcp/adapters, @frontmcp/sdk.

What are the most common weakness types in agentfront CVEs?

agentfront's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop')), CWE-918 (Server-Side Request Forgery (SSRF)).

Are there public exploits for agentfront vulnerabilities?

Yes — 4 of agentfront's CVEs have a known public exploit.

How many critical agentfront vulnerabilities are there?

agentfront has 3 critical and 1 high-severity CVEs.

What is the average severity of agentfront CVEs?

The average CVSS base score across agentfront's scored CVEs is 8.6.

RadicalNotion.AI

Log in Start free

5 CVEs

agentfront Vulnerabilities

Name: agentfront vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for agentfront.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

8.6

Avg CVSS

2026–2026

Overview

agentfront has 5 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 8.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting agentfront products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on agentfront's vulnerability posture, as a share of its 5 published CVEs.

Average CVSS: 8.6
Critical / high: 80%
Actively exploited (KEV): 0%
Public exploit available: 80%
Patch available: 100%

Severity and exploitation

How the CVSS severity of agentfront's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of agentfront's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of agentfront's CVEs have a known public exploit available.

Most affected products

The agentfront products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in agentfront CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish agentfront CVE records.

GitHub_M5 CVEs

Latest agentfront CVEs

The most recently disclosed vulnerabilities affecting agentfront.

FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool
CWE-94
Critical · CVSS 9.3
EPSS 0.4%2026-08-05
FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications
CWE-918
High · CVSS 7.5
EPSS 0.3%2026-04-08
@enclave-vm/core is vulnerable to Sandbox Escape
CWE-94
Critical · CVSS 10.0
EPSS 0.9%2026-02-25
Enclave has a sandbox escape via infinite recursion and error objects
CWE-835
Medium · CVSS 6.4
EPSS 0.2%2026-02-06
Sandbox Escape via Host Error Prototype Chain in enclave-vm
CWE-94
Critical · CVSS 10.0
EPSS 0.6%2026-01-13

Track new agentfront CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor agentfront CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,363 CVEs linux22,636 CVEs Google16,479 CVEs Apple15,074 CVEs Oracle12,707 CVEs Debian10,225 CVEs IBM8,823 CVEs Red Hat8,087 CVEs

Browse all vendors

Frequently asked questions

Common questions about agentfront vulnerabilities.

How many CVEs does agentfront have?: agentfront has 5 published CVE records since 2026, including 5 in the last two years.
How many agentfront CVEs are in CISA KEV?: None of agentfront's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which agentfront products have the most CVEs?: The agentfront products with the most published CVEs are enclave, enclave-vm, frontmcp, @frontmcp/adapters, @frontmcp/sdk.
What are the most common weakness types in agentfront CVEs?: agentfront's CVEs most often map to these CWE weakness types: CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop')), CWE-918 (Server-Side Request Forgery (SSRF)).
Are there public exploits for agentfront vulnerabilities?: Yes — 4 of agentfront's CVEs have a known public exploit.
How many critical agentfront vulnerabilities are there?: agentfront has 3 critical and 1 high-severity CVEs.
What is the average severity of agentfront CVEs?: The average CVSS base score across agentfront's scored CVEs is 8.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track agentfront vulnerabilities

Monitor new agentfront vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing