Researcher discloses same MCP server-side request forgery flaw affecting Google, JPMorgan, and two government agencies
Researcher Discloses Same MCP Flaw at Google, JPMorgan, Two Governments
Independent security researcher Syed Anas Mohiuddin said in an October 2026 research update that the same class of server-side request forgery (SSRF) flaws in MCP servers has been confirmed and fixed at five unrelated organizations—Google, JPMorgan Chase, Weaviate, the French Interministerial Digital Directorate, and the Tangerang city government in Indonesia—validating the structural flaw prediction he made in May 2026. The generic HTTP component in Google mcp-toolbox 0.3.0 through 1.4.0, lacking redirect limits and destination IP validation, can be steered by a crafted path parameter to internal networks or any external endpoint, corresponding to CVE-2026-14540, CVSS 8.0; fix PR #3448 was merged on June 18 and released with v1.5.0, adding SSRFGuard to prevent DNS rebinding.
The same request-forgery flaw in an MCP server was confirmed and fixed at five unrelated organizations, providing a cross-reference checklist for teams deploying MCP servers.