Researcher discloses same-class SSRF vulnerabilities in MCP servers at multiple organizations
Start here
Independent security researcher Syed Anas Mohiuddin said in an October 2026 research update that the same class of server-side request forgery (SSRF) flaws in MCP servers has been confirmed and fixed at five unrelated organizations—Google, JPMorgan Chase, Weaviate, the French Interministerial Digital Directorate (DINUM), and the Tangerang city government in Indonesia—validating the structural flaw prediction he made in May 2026. His disclosed Protocol Pivoting work also focuses on the trust boundary between agent inputs and tool access permissions. Tech Times relayed the researcher's investigation, focusing on what he says are still-unfixed US federal server issues, and cited other security investigations; the relevant figures were not checked against primary reports in this material. The description that some government servers remain unfixed is the researcher's own account and cannot be treated as an independent verification of the full scope of impact.
Generated by AI from reports · Updated 4 days ago
Latest developments
Progress timeline
- TechTimesSelectedTech Times relays researchers' investigation into the progress of MCP vulnerability fixes
Tech Times 报道研究者披露的 MCP 漏洞修复进展，关注其所称仍未修复的美国联邦服务器问题。报道还引用其他安全调查，相关数字未在本次材料中核对一手报告。
- Unite.AISelectedResearcher discloses same MCP server-side request forgery flaw affecting Google, JPMorgan, and two government agencies
Independent security researcher Syed Anas Mohiuddin said in an October 2026 research update that the same class of server-side request forgery (SSRF) flaws in MCP servers has been confirmed and fixed at five unrelated organizations—Google, JPMorgan Chase, Weaviate, the French Interministerial Digital Directorate, and the Tangerang city government in Indonesia—validating the structural flaw prediction he made in May 2026. The generic HTTP component in Google mcp-toolbox 0.3.0 through 1.4.0, lacking redirect limits and destination IP validation, can be steered by a crafted path parameter to internal networks or any external endpoint, corresponding to CVE-2026-14540, CVSS 8.0; fix PR #3448 was merged on June 18 and released with v1.5.0, adding SSRFGuard to prevent DNS rebinding.
- Date not givenThe Next WebSelectedFive organizations, including Google and JPMorgan, fixed the same class of SSRF vulnerability in MCP servers
研究者 Syed Anas Mohiuddin 更新 Protocol Pivoting 披露进展，称 Google、JPMorgan Chase、Weaviate、法国 DINUM 和印尼坦格朗市政府分别确认并修复了同类 MCP 服务端请求伪造问题。研究关注智能体输入与工具访问权限之间的信任边界。关于部分政府服务器仍未修复的描述属于研究者自述，不能视为对全部影响范围的独立核实。
Related discussion
Attention trend
New sources per day
- Oct 6New1 sources (1 outlets,0 accounts)
- Oct 7New2 sources (2 outlets,0 accounts)
- Oct 8New0 sources (0 outlets,0 accounts)
- Oct 9New0 sources (0 outlets,0 accounts)
- Oct 10New0 sources (0 outlets,0 accounts)
- Oct 11New0 sources (0 outlets,0 accounts)
- Oct 12New0 sources (0 outlets,0 accounts)
- Oct 13New0 sources (0 outlets,0 accounts)