SSRF in Modelcontextprotocol Mcp-Server-Everything
CVE-2026-104120
A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_url of the file mcp_server_fetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
Vulnerability class: SSRF (Server-Side Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Modelcontextprotocol Mcp-Server-Everything — versions 2026.6.0, 2026.6.1, 2026.6.2
- Modelcontextprotocol Mcp-Server-Fetch — versions 2026.6.0, 2026.6.1, 2026.6.2
Weakness classification (CWE)
References
- vuldb.com/vuln/412764 (technical-description, vdb-entry)
- vuldb.com/vuln/412764/cti (signature, permissions-required)
- vuldb.com/cve/CVE-2026-104120 (third-party-advisory)
- vuldb.com/submit/960099 (third-party-advisory)
- github.com/modelcontextprotocol/servers/issues/4492 (issue-tracking, exploit)
- github.com/modelcontextprotocol/servers/pull/4890 (issue-tracking, patch)
Frequently asked questions
- What is CVE-2026-104120?
- CVE-2026-104120 is a high-severity vulnerability in Modelcontextprotocol Mcp-Server-Everything, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.3/10. Published 2026-10-02.
- How severe is CVE-2026-104120?
- High severity. CVSS v3 base score is 7.3 out of 10.