CVE-2026-74842
Received Received - Intake

Server-Side Request Forgery in PromptShopMCP Image-Toolkit

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: VulDB

Description
A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function download_image of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument image_url results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-74842
EUVD
EUVD-2026-60078

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
kira-pgr promptshopmcp to 5bc0cd17358e19a5415d11a531088170d7b81452 (inc)
kira-pgr image-toolkit-mcp-server *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) in the Image-Toolkit-MCP-Server component of PromptShopMCP. The issue occurs in the download_image function of server.py, where a user-supplied image_url parameter is passed directly to a requests.get() call without validation. This allows attackers to make the server issue arbitrary HTTP GET requests to internal or external hosts, bypassing intended restrictions.

Detection Guidance

To detect this SSRF vulnerability, monitor outbound HTTP requests from the Image-Toolkit-MCP-Server, particularly those targeting internal IPs or unusual domains. Check server logs for requests to localhost, 127.0.0.1, or private IP ranges. Use network tools like tcpdump or Wireshark to capture unexpected outbound traffic from the server process.

Impact Analysis

An attacker could exploit this to access internal network services, probe for open ports, or exfiltrate data by tricking the server into making requests to restricted endpoints. If the server can reach internal services, sensitive information might be leaked. Error messages could also reveal internal network details, aiding further attacks.

Compliance Impact

This SSRF vulnerability could lead to unauthorized access to internal systems, potentially violating data protection requirements under GDPR and HIPAA. If sensitive data is exposed or exfiltrated due to this flaw, organizations may face compliance violations, regulatory penalties, and reputational damage.

Mitigation Strategies

Immediately restrict the image_url parameter to only allow trusted domains or IP ranges. Implement strict input validation and allowlisting for URLs. Disable the generate_image_from_url and remove_background tools if not essential. Update the download_image function to validate host, IP range, and protocol before making requests.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74842. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart