CVE-2026-50143: Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token

@apify/actors-mcp-server version 0.10.7 builds Actor standby URLs by directly concatenating a trusted base URL with an attacker-controlled webServerMcpPath value taken from an Actor definition returned by the Apify API. An attacker who publishes a malicious Actor with a crafted webServerMcpPath (e.g., @attacker.example/mcp) can cause the MCP client to resolve the final URL to an entirely different host. Because the MCP client unconditionally attaches the victim’s Authorization: Bearer <APIFY_TOKEN> header to every outbound connection, the victim’s Apify API token is exfiltrated to the attacker’s server. CVSS Base Score: 8.1 (High).