CVE-2026-19337
Received Received - Intake

Server-Side Request Forgery in adenot mcp-google-search

Publication date: 2026-08-09

Last updated on: 2026-08-09

Assigner: VulDB

Description
A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component read_webpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This patch is called f071d491b685011ca04e8ab8d586fc65f86bcee1. It is advisable to implement a patch to correct this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-09
Last Modified
2026-08-09
Generated
2026-08-09
AI Q&A
2026-08-09
EPSS Evaluated
N/A
NVD
CVE-2026-19337
EUVD
EUVD-2026-54887

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
adenot mcp-google-search to 0.3.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19337 is a Server-Side Request Forgery (SSRF) vulnerability in the adenot mcp-google-search tool up to version 0.3.1. The read_webpage function accepts a user-controlled URL parameter without proper validation, allowing attackers to make the server send HTTP requests to internal, loopback, or private network addresses. The vulnerability arises because the tool lacks URL validation, private-address filtering, DNS/IP checks, or redirect destination checks.

Detection Guidance

To detect this SSRF vulnerability in adenot mcp-google-search, check if the read_webpage tool accepts arbitrary URLs without validation. Test by sending requests to internal IPs like 127.0.0.1 or private ranges (e.g., 192.168.1.1). Use curl commands to probe the server: curl -X POST http://localhost:3000/mcp -H 'Content-Type: application/json' -d '{"type":"callTool","params":{"name":"read_webpage","arguments":{"url":"http://127.0.0.1/admin"}}}'

Inspect server logs for outbound requests to unexpected destinations. Verify if the tool processes URLs without strict validation of IP ranges or redirects. Compare installed version against the patched commit f071d491b685011ca04e8ab8d586fc65f86bcee1.

Impact Analysis

This vulnerability allows attackers to access sensitive internal resources or APIs that are not exposed to the client. If the server can access internal services, an attacker could exploit this to send crafted URLs and retrieve confidential data from private networks. The attack is restricted to local execution but can lead to unauthorized information disclosure or network reconnaissance.

Compliance Impact

This SSRF vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements under GDPR and HIPAA. If exploited, it may result in data breaches exposing personal or health information, leading to legal penalties, compliance violations, and reputational damage for organizations handling regulated data.

Mitigation Strategies

Immediately update to the patched version by applying commit f071d491b685011ca04e8ab8d586fc65f86bcee1 or newer. Disable the read_webpage tool if not required. Implement network-level restrictions to block outbound requests to private IP ranges.

Add strict URL validation in the application code to reject non-HTTP/HTTPS URLs and private IPs. Monitor for unusual outbound traffic patterns. Restrict server permissions to limit access to internal services.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19337. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart