Evidence · DiggingBeagle record
Agent Router MCP proxy trusted header bypass
Advisory: an internal MCP proxy was reachable outside loopback and trusted headers normally set by Envoy.
- Source role
- primary disclosure
Evidence record
Advisory: an internal MCP proxy was reachable outside loopback and trusted headers normally set by Envoy.
Claim-level citations (1)
- supportsDirect MCP proxy listener bypassed Agent Router authentication headers: The Agent Router extproc MCP proxy bound TCP port 9856 on all interfaces and accepted caller-supplied route and subject headers without the Envoy frontend authentication filters.
Summary; How the proxy is told to listen; Why the exposure matters