Cross-site Request Forgery (CSRF) Affecting @zenalexa/unicli package, versions <0.225.2
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-ZENALEXAUNICLI-17818144
- published5 Jul 2026
- disclosed19 Jun 2026
- creditdodge1218
Introduced: 19 Jun 2026
NewCVE-2026-58497 (opens in a new tab)How to fix?
Upgrade @zenalexa/unicli to version 0.225.2 or higher.
Overview
@zenalexa/unicli is an Universal computer-control platform for agents: intent, policy, action substrates, evidence, delivery, and repair.
Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) via the MCP HTTP transport process. An attacker can execute unauthorized actions on the user's local server by sending crafted POST requests from a malicious web page to the local /mcp endpoint when the user has started the local MCP HTTP transport. This is only exploitable if the legacy HTTP MCP transport is exposed to browser-originated traffic.
Workaround
This vulnerability can be mitigated by not exposing the legacy HTTP MCP transport to browser-originated traffic and using the default stdio transport or the Streamable HTTP transport instead.