# CVE-2026-50143: CVE-2026-50143: Apify MCP Server Leaks API Tokens via Path Injection

> CVE-2026-50143 is a high-severity credential theft issue (CVSS 8.1) in @apify/actors-mcp-server, a MCP server. Affected: <0.10.11. Fixed in 0.10.11.

- **Canonical URL:** https://catalog.anomity.ai/vuln/cve-2026-50143
- **Aliases:** ti-045
- **Severity:** high
- **CVSS:** 8.1
- **Attack type:** Credential theft
- **Component:** @apify/actors-mcp-server (MCP server)
- **Package:** @apify/actors-mcp-server (npm)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-07-01
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/cve-2026-50143

## Summary

A path injection flaw in the @apify/actors-mcp-server npm package lets a malicious Actor with a crafted webServerMcpPath redirect the MCP client to an attacker host, exfiltrating the victim's Apify API token through the authorization header. Rated CVSS 8.1; any MCP client wired to a compromised Apify Actor is affected.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| <0.10.11 | 0.10.11 |

## Am I affected by CVE-2026-50143?

You are affected if you run @apify/actors-mcp-server <0.10.11. Versions 0.10.11 and later include the fix.

## How do I fix CVE-2026-50143?

Upgrade @apify/actors-mcp-server to 0.10.11 or later to stop Apify token exfiltration via crafted MCP paths.

## How do I find every machine running @apify/actors-mcp-server?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run @apify/actors-mcp-server and which version, then enforce a policy on it.

## References

- advisory: https://advisories.gitlab.com/npm/@apify/actors-mcp-server/CVE-2026-50143/
- cve: https://nvd.nist.gov/vuln/detail/CVE-2026-50143

## Related vulnerabilities

- [tensorlake-npm-sdk-0-5-144-compromised-by-a-shai-hulud-chaindrop-worm](https://catalog.anomity.ai/vuln/tensorlake-npm-sdk-0-5-144-compromised-by-a-shai-hulud-chaindrop-worm) — critical
- [CVE-2026-104850](https://catalog.anomity.ai/vuln/cve-2026-104850) — high
- [CVE-2026-63127](https://catalog.anomity.ai/vuln/cve-2026-63127) — high
- [CVE-2026-59822](https://catalog.anomity.ai/vuln/cve-2026-59822) — critical
- [gen-digital-infostealers-callbackbeaver-amatera-remus-djinn-now-harvest](https://catalog.anomity.ai/vuln/gen-digital-infostealers-callbackbeaver-amatera-remus-djinn-now-harvest) — high
- [shai-hulud-wave-c-payload-returns-after-111-days-including-feishu-docx](https://catalog.anomity.ai/vuln/shai-hulud-wave-c-payload-returns-after-111-days-including-feishu-docx) — critical

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=cve-2026-50143