0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d pdf-tools-mcp server.py ControlFlowNode pdf_file_path server-side request forgery

Summaryinfo

A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. It has been declared as critical. Affected by this issue is the function ControlFlowNode of the file local_servers/pdf-tools-mcp/pdf_tools_mcp/server.py of the component pdf-tools-mcp. Executing a manipulation of the argument pdf_file_path can lead to server-side request forgery. This vulnerability is registered as CVE-2026-94051. It is possible to launch the attack remotely. Furthermore, an exploit is available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

Detailsinfo

A vulnerability classified as critical was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. This vulnerability affects the function ControlFlowNode of the file local_servers/pdf-tools-mcp/pdf_tools_mcp/server.py of the component pdf-tools-mcp. The manipulation of the argument pdf_file_path with an unknown input leads to a server-side request forgery vulnerability. The CWE definition for the vulnerability is CWE-918. The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. As an impact it is known to affect confidentiality, integrity, and availability.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-94051. The exploitation appears to be easy. The attack can be initiated remotely. Technical details and also a public exploit are known.

It is possible to download the exploit at github.com. It is declared as proof-of-concept. The project was informed of the problem early through an issue report but has not responded yet.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• 0717376

Name

• cowork_bench

Version

• d943e75bc0fc8e3b27141979300cd8cbcd1e890d

Website

• Product: https://github.com/0717376/cowork_bench/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #949604: 0717376 cowork_bench d943e75bc0fc8e3b27141979300cd8cbcd1e890d Server-Side Request Forgery (by Xh1Xxhg)

Once again VulDB remains the best source for vulnerability data.

Discussion