CVE-2026-58201
Received Received - Intake

Lokka M365 MCP Server URL Spoofing via Path Manipulation

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: GitHub, Inc.

Description
Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially crafted path can alter URL authority parsing and cause an Azure Resource Manager bearer token to be sent to an unintended host. This issue is fixed in version 2.1.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-58201
EUVD
EUVD-2026-78934

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
lokka lokka to 2.1.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in the Lokka project. It involves improper handling of user-controlled path parameters in Azure Resource Manager (Azure RM) URLs. Attackers can inject malicious inputs like '@attacker.com' to redirect requests to attacker-controlled hosts, potentially exposing Azure RM Bearer tokens.

Detection Guidance

To detect this vulnerability, inspect Lokka instances running versions before 2.1.2 for improper URL handling in Azure Resource Manager requests. Check logs for URLs containing user-controlled paths with special characters like '@' or '//' that could alter host parsing. Use network monitoring tools to detect outbound requests to unexpected hosts.

Impact Analysis

An attacker could exploit this to send Azure RM Bearer tokens to an unintended host, leading to unauthorized access to Azure resources. This could result in data breaches, unauthorized actions, or further attacks within the Azure environment.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules for protected health information. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Upgrade Lokka to version 2.1.2 or later immediately. If upgrading is not possible, implement input validation to reject paths containing '@', '//', absolute URLs, or backslashes. Use secure URL construction methods that leverage the URL standard library to safely parse and compose URLs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58201. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart