pipeboard-co meta-ads-mcp up to 1.0.114 Image Download utils.py try_multiple_download_methods image_url server-side request forgery

Summaryinfo

A vulnerability classified as critical has been found in pipeboard-co meta-ads-mcp up to 1.0.114. Affected is the function try_multiple_download_methods of the file meta_ads_mcp/core/utils.py of the component Image Download. Performing a manipulation of the argument image_url results in server-side request forgery. This vulnerability was named CVE-2026-54549. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in pipeboard-co meta-ads-mcp up to 1.0.114. It has been classified as critical. This affects the function try_multiple_download_methods of the file meta_ads_mcp/core/utils.py of the component Image Download. The manipulation of the argument image_url with an unknown input leads to a server-side request forgery vulnerability. CWE is classifying the issue as CWE-918. The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/core/ads.py passes an attacker-controlled image_url to try_multiple_download_methods() in meta_ads_mcp/core/utils.py, where httpx.AsyncClient uses follow_redirects=True and performs HTTP requests without validating the scheme, host, or resolved IP address. In a streamable-http deployment, a network caller can use any non-empty authorization value because Meta credential validation occurs after the image download, then direct the server to loopback services, private-network addresses, cloud metadata endpoints, or redirect-chained internal targets. The resulting server-side request forgery can expose internal data, invoke state-changing internal services, or disrupt reachable services. This issue is fixed in version 1.0.115.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2026-54549 since 06/15/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 1.0.115 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• pipeboard-co

Name

• meta-ads-mcp

Version

• 1.0.114

Website

• Product: https://github.com/pipeboard-co/meta-ads-mcp/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion