# CVE-2026-46515: mwtcmi Frogman missing authorization in multiple API tools

Source: https://junglewise.ai/threats/cve-2026-46515-mwtcmi-frogman-missing-authorization-in-multiple-api-tools  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-16. Updated: 2026-07-16  
License: CC BY 4.0 with a link back

CVE-2026-46515 · Severity: info · CVSS 9.3 · Published 2026-07-16

Frogman, a tool used for managing PBX (Private Branch Exchange) phone systems, contained a security flaw where low-privileged users could access sensitive administrative information. An attacker with basic access could retrieve system passwords, call history, outbound dialing PINs, and root-level server connection commands. This could lead to full system takeover, unauthorized phone calls, or the theft of customer communication records.

Technologies: [Mwtcmi Frogman](https://junglewise.ai/threats/technologies/frogman). Vendors: [Mwtcmi](https://junglewise.ai/threats/vendors/mwtcmi).

## Quick answers

**Is CVE-2026-46515 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-46515 being exploited in the wild.

**How severe is CVE-2026-46515?** Informational severity, with a CVSS score of 9.3, published 16 July 2026.

**Which products and versions are affected?** Mwtcmi Frogman < 1.6.3.

**Is there a fix for CVE-2026-46515?** A patch was published on 2026-05-13: Version 1.6.3 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-46515 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-46515?** Check whether you run Mwtcmi Frogman at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A missing authorization vulnerability (CWE-862) existed in Frogman's MCP and HTTP API where eight sensitive tools inherited a default 'PERM_READ' permission level instead of requiring administrative access. Authenticated attackers with low-tier permissions could invoke functions such as 'fm_list_managers' and 'fm_diagnose_trunk' to extract Asterisk Manager Interface (AMI) secrets, SIP trunk passwords, plaintext dial PINs, and full dialplans. Additionally, 'fm_get_mcp_config' exposed root SSH connection strings, and 'fm_run_saved_query' allowed execution of arbitrary GraphQL queries. The vulnerability is resolved in version 1.6.3 by elevating these tools to 'PERM_ADMIN' and implementing line-level redaction for sensitive fields in diagnostic outputs.

## Affected products

- mwtcmi Frogman < 1.6.3

## Timeline

- 2026-05-13: patched: Version 1.6.3 released
- 2026-07-16: disclosed: CVE-2026-46515 published

## References

- [https://github.com/mwtcmi/frogman/commit/55ea257d5c24bc01c814a607faa7e76e86b111ec](https://github.com/mwtcmi/frogman/commit/55ea257d5c24bc01c814a607faa7e76e86b111ec)
- [https://github.com/mwtcmi/frogman/commit/b8a8bfc12b564bcb77caef952873b9ffd4a98b00](https://github.com/mwtcmi/frogman/commit/b8a8bfc12b564bcb77caef952873b9ffd4a98b00)
- [https://github.com/mwtcmi/frogman/issues/13](https://github.com/mwtcmi/frogman/issues/13)
- [https://github.com/mwtcmi/frogman/issues/25](https://github.com/mwtcmi/frogman/issues/25)
- [https://github.com/mwtcmi/frogman/releases/tag/v1.6.3](https://github.com/mwtcmi/frogman/releases/tag/v1.6.3)
- [https://github.com/mwtcmi/frogman/security/advisories/GHSA-q4c4-5cr4-8q47](https://github.com/mwtcmi/frogman/security/advisories/GHSA-q4c4-5cr4-8q47)

## Related threats

- [mwtcmi Frogman stored XSS in chat console formatter](https://junglewise.ai/threats/cve-2026-46516-mwtcmi-frogman-stored-xss-in-chat-console-formatter)
- [mwtcmi Frogman plaintext credential disclosure in audit logs](https://junglewise.ai/threats/cve-2026-46514-mwtcmi-frogman-plaintext-credential-disclosure-in-audit-logs)
- [mwtcmi Frogman plaintext storage of API tokens](https://junglewise.ai/threats/cve-2026-46513-mwtcmi-frogman-plaintext-storage-of-api-tokens)
- [mwtcmi Frogman code injection in fm_dialplan_apply](https://junglewise.ai/threats/cve-2026-46512-mwtcmi-frogman-code-injection-in-fm-dialplan-apply)