| Title | houtini-ai voice-analyser-mcp 2.1.1 Server-Side Request Forgery |
|---|
| Description | A Server-Side Request Forgery (SSRF) vulnerability exists in the collect_corpus tool of houtini-ai/voice-analyser-mcp version 2.1.1. The tool accepts user-controlled URLs through the sitemap_url parameter without validation, allowing attackers to make the MCP server send HTTP requests to arbitrary internal network addresses. The vulnerable data flow begins when the MCP client provides a malicious URL, which passes through src/index.ts:36 and src/tools/collect-corpus.ts:44 before triggering HTTP requests at src/utils/crawler.ts:15 and src/utils/crawler.ts:64. Dynamic testing confirmed exploitability by successfully accessing localhost services, with error messages revealing that HTTP requests reached target endpoints despite sitemap parsing failures. This dual-layer SSRF enables attackers to first fetch a malicious sitemap from their server, then batch-crawl up to 1,000 internal URLs listed in that sitemap, with all response content saved to the local filesystem. Attack vectors include blind SSRF for port scanning via error message analysis, accessing cloud metadata services at x.x.x.x to steal IAM credentials, bypassing firewall restrictions to reach internal APIs, and exfiltrating internal service responses through the dual-request mechanism. The vulnerability (CVSS 8.6 HIGH) particularly threatens cloud deployments where metadata service access can lead to complete account compromise. No URL validation prevents localhost (127.0.0.1, ::1), private IPs (10.x, 172.16.x, 192.168.x), or cloud metadata endpoints. Remediation requires implementing URL validation to block private network addresses and internal services before passing user input to the fetch() calls in the crawler utility functions. |
|---|
| Source | ⚠️ https://github.com/Net-defense/public_exp/issues/2 |
|---|
| User | Lululu (UID 101009) |
|---|
| Submission | 09/09/2026 04:54 (1 month ago) |
|---|
| Moderation | 10/11/2026 10:37 (1 month later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 416566 [houtini-ai voice-analyser-mcp up to 2.1.1 collect_corpus src/utils/crawler.ts fetch sitemap_url server-side request forgery] |
|---|
| Points | 20 |
|---|