EUVD-2026-19144Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
6DescriptionCVE.org
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component URL Parameter Handler. The manipulation of the argument request.params.name/request.params.arguments leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Server-side request forgery (SSRF) in imprvhub mcp-browser-agent through version 0.8.0 allows authenticated remote attackers to manipulate URL parameters in the CallToolRequestSchema handler, enabling them to forge requests to arbitrary servers. Publicly available exploit code exists, and the vendor has not responded to early disclosure attempts, creating unmitigated exposure for users of affected versions.
Technical ContextAI
The vulnerability exists in the URL Parameter Handler component (src/handlers.ts) of mcp-browser-agent, specifically in the CallToolRequestSchema function. The flaw stems from insufficient input validation on request.params.name and request.params.arguments, allowing an attacker to inject arbitrary URL parameters that bypass intended destination restrictions. This is a classic server-side request forgery (CWE-918) where user-controlled input is used to construct outbound HTTP requests without proper sanitization, enabling the compromised server to make unintended requests on behalf of the attacker to internal or external systems.
RemediationAI
Immediate actions include: (1) review whether mcp-browser-agent is in active use in your environment, as the vendor has not provided a patched release; (2) if use is critical, implement network-level controls restricting outbound requests from the mcp-browser-agent process to only approved internal and external destinations via firewall rules or egress filtering; (3) apply strict input validation and allowlisting on all URL parameters passed to CallToolRequestSchema, rejecting any requests that deviate from expected patterns; (4) disable or restrict access to mcp-browser-agent to trusted users only, enforcing strong authentication and audit logging. Monitor VulDB (https://vuldb.com/vuln/355398) and the imprvhub GitHub repository for any future patched releases. If a patch becomes available, upgrade immediately.
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today