Mcp Chat Studio
Monthly
Server-side request forgery in JoeCastrom mcp-chat-studio (all versions through 1.5.0) allows unauthenticated remote attackers to forge arbitrary server-initiated HTTP requests by injecting a malicious URL into the `base_url` query parameter of the LLM Models API (`server/routes/llm.js`). A public exploit exists via GitHub issue report, and SSVC classifies this as automatable - meaning it can be scripted for broad scanning. No patch has been issued; the maintainer has not responded to the coordinated disclosure.
Server-side request forgery in JoeCastrom mcp-chat-studio (all versions through 1.5.0) allows unauthenticated remote attackers to forge arbitrary server-initiated HTTP requests by injecting a malicious URL into the `base_url` query parameter of the LLM Models API (`server/routes/llm.js`). A public exploit exists via GitHub issue report, and SSVC classifies this as automatable - meaning it can be scripted for broad scanning. No patch has been issued; the maintainer has not responded to the coordinated disclosure.