| タイトル | 0717376 cowork_bench d943e75bc0fc8e3b27141979300cd8cbcd1e890d Server-Side Request Forgery |
|---|
| 説明 | A server-side request forgery (SSRF) vulnerability (CWE-918) has been identified in 0717376 cowork_bench at commit d943e75bc0fc8e3b27141979300cd8cbcd1e890d, specifically in the get_pdf_info MCP tool provided by the bundled pdf-tools-mcp 0.1.4 component. The tool accepts an attacker-controlled pdf_file_path argument and passes it through resolve_path and download_pdf_from_url to requests.head and requests.get with automatic redirects enabled, without restricting the destination host, port, resolved IP address, or redirect target. An attacker with access to the MCP interface can therefore make the server send HEAD and GET requests to loopback interfaces, internal services, cloud metadata endpoints, or other restricted destinations, including by redirecting an initially supplied URL to a prohibited address. A working exploit has demonstrated a 302 redirect from 127.0.0.1:8000 to a listener on 127.0.0.1:8888, which received both server-originated requests. The subsequent invalid-PDF error occurs only after the requests have completed and does not prevent exploitation. No fixed version is available at the time of reporting. |
|---|
| ソース | ⚠️ https://github.com/0717376/cowork_bench/issues/1 |
|---|
| ユーザー | Xh1Xxhg (UID 90906) |
|---|
| 送信 | 2026年08月27日 09:58 (25 日 ago) |
|---|
| モデレーション | 2026年09月19日 23:54 (24 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 407980 [0717376 cowork_bench 迄 d943e75bc0fc8e3b27141979300cd8cbcd1e890d pdf-tools-mcp server.py ControlFlowNode pdf_file_path 特権昇格] |
|---|
| ポイント | 20 |
|---|