| 제목 | 0717376 cowork_bench d943e75bc0fc8e3b27141979300cd8cbcd1e890d Server-Side Request Forgery |
|---|
| 설명 | A server-side request forgery (SSRF) vulnerability (CWE-918) has been identified in 0717376 cowork_bench at commit d943e75bc0fc8e3b27141979300cd8cbcd1e890d, specifically in the get_pdf_info MCP tool provided by the bundled pdf-tools-mcp 0.1.4 component. The tool accepts an attacker-controlled pdf_file_path argument and passes it through resolve_path and download_pdf_from_url to requests.head and requests.get with automatic redirects enabled, without restricting the destination host, port, resolved IP address, or redirect target. An attacker with access to the MCP interface can therefore make the server send HEAD and GET requests to loopback interfaces, internal services, cloud metadata endpoints, or other restricted destinations, including by redirecting an initially supplied URL to a prohibited address. A working exploit has demonstrated a 302 redirect from 127.0.0.1:8000 to a listener on 127.0.0.1:8888, which received both server-originated requests. The subsequent invalid-PDF error occurs only after the requests have completed and does not prevent exploitation. No fixed version is available at the time of reporting. |
|---|
| 원천 | ⚠️ https://github.com/0717376/cowork_bench/issues/1 |
|---|
| 사용자 | Xh1Xxhg (UID 90906) |
|---|
| 제출 | 2026. 08. 27. AM 09:58 (25 날 ago) |
|---|
| 모더레이션 | 2026. 09. 19. PM 11:54 (24 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 407980 [0717376 cowork_bench 까지 d943e75bc0fc8e3b27141979300cd8cbcd1e890d pdf-tools-mcp server.py ControlFlowNode pdf_file_path 권한 상승] |
|---|
| 포인트들 | 20 |
|---|