{"id":"CVE-2026-85700","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-85700","summary":"Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read admin-defined API keys. Attackers with basic…","details":"Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read admin-defined API keys. Attackers with basic authentication can call GET /tool/{tool_id} or GET /tool endpoints to retrieve plaintext authorization headers and third-party API credentials, then use them to directly access upstream APIs.","published":"2026-09-04T14:32:42.042Z","modified":"2026-09-04T14:55:15.464Z","cvss":{"score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"REPORT","url":"https://github.com/onyx-dot-app/onyx/issues/13165"},{"type":"WEB","url":"https://github.com/onyx-dot-app/onyx"},{"type":"WEB","url":"https://github.com/onyx-dot-app/onyx/blob/v4.6.6/backend/onyx/server/features/tool/models.py"},{"type":"WEB","url":"https://github.com/onyx-dot-app/onyx/blob/v4.6.6/backend/onyx/server/features/tool/api.py"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/onyx-4.6.6-custom-tool-secret-header-disclosure-via-tool-endpoints"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-09-04T14:55:15.464Z"}}