EUVD-2026-18798
GHSA-346c-r244-6h29
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
6DescriptionCVE.org
A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bfe5f6e582b6cc288bb897b35cf2/ca613b736ab787bc926932f59cddc69457185a83. This issue affects the function extractContent of the file src/services/content-extractor.service.ts of the component Model Context Protocol Handler. The manipulation of the argument URL leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Server-side request forgery in mixelpixx Google-Research-MCP allows authenticated remote attackers to craft malicious URLs passed to the extractContent function, enabling them to make arbitrary HTTP requests from the affected server. The vulnerability affects the Model Context Protocol Handler component, has a publicly available exploit, and receives a CVSS 5.3 score with moderate exploitation likelihood. The vendor has not responded to disclosure attempts, and the project uses rolling releases, making patch tracking difficult.
Technical ContextAI
The vulnerability exists in the extractContent function within src/services/content-extractor.service.ts of the Model Context Protocol Handler component. The root cause is improper validation of user-supplied URL parameters (CWE-918: Server-Side Request Forgery), allowing attackers to manipulate URLs without adequate sanitization. The affected product is mixelpixx Google-Research-MCP, identified by CPE cpe:2.3:a:mixelpixx:google-research-mcp:*:*:*:*:*:*:*:*. As a Model Context Protocol implementation, this component is designed to handle protocol requests that interact with external content sources, making it particularly susceptible to SSRF attacks when URL handling is insufficient.
RemediationAI
No vendor-released patch identified at time of analysis, as the vendor has not responded to disclosure and the project employs rolling releases without traditional version tracking. Mitigation strategies include: restrict network access to the Model Context Protocol Handler service to only trusted internal networks; implement URL allowlisting at the application level to prevent requests to internal IP ranges (127.0.0.1, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) and metadata services (169.254.169.254); apply principle of least privilege by limiting service account permissions; and monitor outbound HTTP requests from the affected component for anomalous destinations. For organizations using this project, monitor the GitHub repository (https://github.com/wing3e/public_exp/issues/21 documents the public exploit) for upstream fixes and consider switching to maintained forks if available. Input validation improvements should be implemented upstream to properly sanitize URL parameters before processing.
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today