Frogman: Multiple read-tier tools expose admin-grade data and arbitrary GraphQL execution
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-862.
Summary
Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERM_READ access was sufficient to call fm_list_managers, fm_list_pinsets, fm_show_context, fm_get_mcp_config, fm_backup_status, fm_whos_calling, fm_run_saved_query, and fm_diagnose_trunk, exposing AMI manager secrets, outbound dial PINs, full Asterisk dialplan context, root SSH connection commands, backup artifact paths, CDR history, arbitrary saved GraphQL query execution, and raw AMI endpoint dumps containing SIP fields such as password, md5_cred, and oauth_secret. This issue is fixed in version 1.6.3.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
- Fix · CNA frogman (mwtcmi) Fixed in 1.6.3
Timeline
- 2026-10-02 Threatist record created from CVE-2026-46515
References
Other 6
- https://github.com/mwtcmi/frogman/security/advisories/GHSA-q4c4-5cr4-8q47
- https://github.com/mwtcmi/frogman/issues/13
- https://github.com/mwtcmi/frogman/issues/25
- https://github.com/mwtcmi/frogman/commit/55ea257d5c24bc01c814a607faa7e76e86b111ec
- https://github.com/mwtcmi/frogman/commit/b8a8bfc12b564bcb77caef952873b9ffd4a98b00
- https://github.com/mwtcmi/frogman/releases/tag/v1.6.3
More mwtcmi vulnerabilities
- TI-2026-34201 Frogman: Dialplan template parameters interpolated into extensions_custom.conf without escaping CVSS 3.1CRITICAL 9.9
- TI-2026-34202 Frogman: API tokens stored in plaintext CVSS 3.1HIGH 7.4
- TI-2026-34203 Frogman: Plaintext passwords and secrets persisted to audit log CVSS 3.1MEDIUM 6.5
- TI-2026-34205 Frogman vulnerable to stored XSS in chat console formatter (escalation vector in multi-admin deployments) CVSS 4.0MEDIUM 4.8
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences