CVE-2026-45609 Details
Description
mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI. Prior to 0.1.9, the mcp-security framework fails to implement the mandatory SSRF mitigations outlined in the Model Context Protocol (MCP) security specifications. Specifically, it processes untrusted URLs for OAuth-related discovery and metadata without verifying if the targets are malicious or internal to the network. This only affects installations with Dynamic Client Registration (DCR) enabled This vulnerability is fixed in 0.1.9.
A server-side request forgery (SSRF) vulnerability has been identified in the mcp-security framework, which supports Security and Authorization for Model Context Protocol in Spring AI. This issue affects versions prior to 0.1.9 and arises from the framework's failure to implement required SSRF mitigations. The vulnerability allows untrusted URLs to be processed for OAuth-related discovery and metadata without proper verification, potentially exposing installations with Dynamic Client Registration (DCR) enabled to risks. DCR does not validate URLs provided by MCP Servers and Authorization Servers, leaving room for exploitation.
Users can upgrade to version 0.1.9 or later to address this vulnerability. If DCR is necessary, users may provide their own McpOAuth2ClientManager. Additionally, both McpMetadataDiscoveryService and DynamicClientRegistrationService can be customized with subclasses or default implementations that include a RestClient with URL filtering capabilities.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/spring-ai-community/mcp-security/security/advisories/GHSA-qjp4-4jvr-xqg3 | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| springaicommunity mcp security | >= 0.1.0, < 0.1.9 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 21, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 3, 2026 | Initial Analysis | [email protected] |
| May 29, 2026 | New CVE Received | [email protected] |