{"id":"INC-apify-w4jm0jmpbn05","kind":"incident","aliases":[],"related":[],"title":"Apify: MCP: Failing OAuth sing-in from clients using CIMD with loopback redirects","description":"We have implemented a fix for the OAuth flow, and the connections are now working normally.","summary":null,"severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Apify","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apify","incident","ops","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-05-06T20:08:34+00:00","first_seen_at":"2026-11-12T15:06:30+00:00","triaged_at":"2026-11-12T15:07:42+00:00","updated_at":"2026-11-12T15:07:42+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'apifi':1A,20B 'apify':17A,19A 'cimd':11A 'client':9A 'connect':35C 'fail':3A 'fix':28C 'flow':32C 'implement':26C 'inc':16A 'inc-apify-w4jm0jmpbn05':15A 'incid':21B 'loopback':13A 'mcp':2A 'normal':39C 'oauth':4A,31C 'op':22B 'redirect':14A 'sing':6A 'sing-in':5A 'use':10A 'vendor':23B 'w4jm0jmpbn05':18A 'work':38C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["apify"],"ptokens":["apify"],"labels":["apify","incident","medium","ops","vendor"],"campaign_type":null,"search_a":"'apifi':1A 'apify':17A,19A 'cimd':11A 'client':9A 'fail':3A 'inc':16A 'inc-apify-w4jm0jmpbn05':15A 'loopback':13A 'mcp':2A 'oauth':4A 'redirect':14A 'sing':6A 'sing-in':5A 'use':10A 'w4jm0jmpbn05':18A","search_b":"'apifi':20B 'incid':21B 'op':22B 'vendor':23B","search_c":"'connect':35C 'fix':28C 'flow':32C 'implement':26C 'normal':39C 'oauth':31C 'work':38C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-05-06T20:08:34+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"apify:w4jm0jmpbn05","url":"https://stspg.io/11zckgvrhmz7","severity":"medium","published_at":"2026-05-06T20:08:34+00:00","modified_at":"2026-05-07T08:27:00+00:00","first_seen_at":"2026-11-12T15:06:30+00:00","fetched_at":"2026-11-12T15:56:32+00:00","note":null}],"documents":[],"disclosures":[{"company":"Apify","domain":"apify.com","url":"https://stspg.io/7sp049kjvxqb","kind":"statuspage","published_at":"2026-11-11T19:46:21+00:00","quote":"On 9 and 10 November 2026, an unauthorized third party gained access to parts of Apify’s internal systems.","confidence":0.9700000286102295,"source":"statuspage","created_at":"2026-11-12T15:05:57+00:00","entry":"stolen-credential"},{"company":"Apify","domain":"stspg.io","url":"https://stspg.io/7sp049kjvxqb","kind":"statuspage","published_at":"2026-11-11T19:46:21+00:00","quote":"On 9 and 10 November, an unauthorized third party used a compromised credential to obtain a number of account credentials and accessed related Apify accounts.","confidence":0.9700000286102295,"source":"statuspage","created_at":"2026-11-12T15:15:49+00:00","entry":"stolen-credential"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}