CVE-2026-63646 CordysCRM MCP Form Configuration Endpoint Exposed to Anonymous Users
Unauthenticated attackers can access CRM form configuration data, revealing the application data model to facilitate further attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-63646?
CVE-2026-63646 is a medium-severity vulnerability in 1Panel-dev CordysCRM, published on 18 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CordysCRM is an open source AI-powered customer relationship management system that supports private deployment. Prior to 1.7.2, GET /mcp/form/config/{formKey} calls McpController.getMcpField without authentication because ShiroFilter.addPublicPathFilters marks /mcp/** as anonymous and the controller has no permission annotation. An unauthenticated caller can obtain field names, types, required flags, default values, options, validation rules, and binding sources for CRM modules, allowing reconstruction of the application data model and more targeted attacks against other inputs. This issue is fixed in version 1.7.2.
Weakness: CWE-200
Which versions are affected by CVE-2026-63646?
How do I fix CVE-2026-63646?
No fix has been published for CVE-2026-63646 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-63646 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-63646 exists.
Sources
Also known as GHSA-46p5-m7pq-82hm.