| Название | houtini-ai seo-crawler-mcp 2.1.5 Server‑Side Request Forgery |
|---|
| Описание | A Server-Side Request Forgery (SSRF) vulnerability exists in the run_seo_audit tool of houtini-ai/seo-crawler-mcp, where user-controlled URLs are passed directly to the Crawlee HTTP crawler without validation (src/core/CrawlOrchestrator.ts:147). The vulnerable data flow begins when an MCP client sends a request with a malicious URL parameter, which passes through src/index.ts:173 and src/tools/run-seo-audit.ts:30 before triggering an HTTP request at the crawler execution point. Dynamic testing with MCP-Inspector confirmed exploitability by successfully accessing a localhost web service on port 8001, with response content saved to the local SQLite database. This vulnerability (CVSS 7.5 HIGH) enables attackers to access internal services, scan private networks (10.x.x.x, 172.16.x.x, 192.168.x.x), steal cloud metadata credentials from x.x.x.x, and bypass firewall restrictions. In cloud deployments, attackers can retrieve IAM role credentials leading to complete account compromise. CodeQL static analysis failed to detect this vulnerability because HTTP requests are made through the third-party Crawlee library rather than direct fetch() calls, with complex multi-layer data flow making taint tracking difficult. Remediation requires implementing URL validation to block localhost addresses, private IP ranges, and cloud metadata endpoints before passing user input to the crawler, affecting all versions up to commit 18ca435a3437d3c3699a10a42976d96667fef732. |
|---|
| Источник | ⚠️ https://github.com/Net-defense/public_exp/issues/1 |
|---|
| Пользователь | Lululu (UID 101009) |
|---|
| Представление | 04.09.2026 05:52 (2 месяцы назад) |
|---|
| Модерация | 11.10.2026 10:34 (1 month later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 416565 [houtini-ai seo-crawler-mcp до 2.1.5 Crawler CrawlOrchestrator.ts run_seo_audit эскалация привилегий] |
|---|
| Баллы | 20 |
|---|