CyberRota Analysis
AI-GeneratedThe vulnerability affects the HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0, allowing for Server-Side Request Forgery (SSRF) due to inadequate request redirection controls and lack of target IP validation. This flaw enables attackers to exploit crafted path parameters, potentially leading to unauthorized requests to internal systems or arbitrary external endpoints. Organizations utilizing these versions of mcp-toolbox should prioritize remediation to mitigate the risk of unauthorized access and data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox implements baseline input sanitization for user-controlled parameters, the underlying HTTP client (internal/sources/http/http.go) fails to safely regulate request redirection boundaries. Specifically, the client is initialized without a restrictive CheckRedirect policy hook and lacks target IP validation. An attacker or a malicious data-driven prompt can supply a crafted path parameter that triggers an open redirect or a direct destination swap on the target backend, coercing the mcp-toolbox into blindly following the redirection and making unauthorized requests to internal or arbitrary external endpoints.
Related CVEs
Other vulnerabilities affecting the same vendor(s)