mzxrai mcp-webresearch up to 0.1.7 visit_page url server-side request forgery

Summaryinfo

A vulnerability, which was classified as problematic, has been found in mzxrai mcp-webresearch up to 0.1.7. Affected by this vulnerability is an unknown functionality of the component visit_page. The manipulation of the argument url leads to server-side request forgery. This vulnerability is referenced as CVE-2026-65056. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in mzxrai mcp-webresearch up to 0.1.7. It has been rated as problematic. This issue affects an unknown functionality of the component visit_page. The manipulation of the argument url with an unknown input leads to a server-side request forgery vulnerability. Using CWE to declare the problem leads to CWE-918. The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. Impacted is confidentiality. The summary by CVE is:

mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the visit_page tool, which only validates the URL protocol without filtering private or reserved IP ranges. Attackers can steer the LLM-controlled URL argument through prompt injection to navigate the server's Playwright browser to internal endpoints such as cloud instance metadata services, causing the server to return sensitive internal page content including credentials into the model context.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-65056 since 07/21/2026. The exploitation is known to be easy. The attack may be initiated remotely. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/21/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• mzxrai

Name

• mcp-webresearch

Version

• 0.1.0
• 0.1.1
• 0.1.2
• 0.1.3
• 0.1.4
• 0.1.5
• 0.1.6
• 0.1.7

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion