Is CVE-2026-85700 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85700?

CVE-2026-85700 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-85700

Description

Onyx 4.6.6 fails to properly restrict access to custom tool credentials stored in custom_headers, allowing any authenticated user to read admin-defined API keys. Attackers with basic authentication can call GET /tool/{tool_id} or GET /tool endpoints to retrieve plaintext authorization headers and third-party API credentials, then use them to directly access upstream APIs.