Server-Side Request Forgery in meta-ads-mcp (CVE-2026-54549)

CVE-2026-54549 is a Server-Side Request Forgery (SSRF) vulnerability in the `upload_ad_image` MCP tool of the `meta-ads-mcp` package, in which an attacker-controlled `image_url` parameter is passed directly to `httpx.AsyncClient(follow_redirects=True).get(url)` without any scheme, host, or IP address validation. When deployed using the `streamable-http` transport, an unauthenticated remote attacker can supply arbitrary URLs-including localhost, RFC 1918 addresses, or cloud instance metadata endpoints such as `http://169.254.169.254/`-to cause the server to issue outbound HTTP requests to those targets; the SSRF fires before Meta API credential validation occurs, meaning any non-empty Bearer token value is sufficient to trigger the vulnerable code path. This vulnerability carries a CVSS 3.1 Base Score of 8.3 (High) and can result in internal data exfiltration, unintended requests to internal services, and exposure of cloud instance metadata including IAM credentials. Affected versions: - < 1.0.115 We recommend updating to: 1.0.115. CVSS 8.3 · our assessment: this_week Vendor advisory: https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-45gf-fjxp-cjpq Details: https://vuln.today/cve/CVE-2026-54549