CVE-2026-5607 Details
Description
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component URL Parameter Handler. The manipulation of the argument request.params.name/request.params.arguments leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A server-side request forgery (SSRF) vulnerability has been identified in imprvhub mcp-browser-agent versions prior to 0.8.0. The issue arises in the CallToolRequestSchema function within src/handlers.ts, where the URL Parameter Handler component improperly validates request parameters. This flaw allows remote attackers to manipulate URL parameters, directing the server to make requests to arbitrary locations. Such exploitation could access internal systems, exfiltrate sensitive data, or bypass network restrictions.
It is recommended to implement a strict URL validation policy at the MCP endpoint, blocking or validating URL parameters before they are processed. Additionally, requiring authentication and authorization for MCP tools, along with auditing and rate-limiting sensitive operations, can help mitigate the risk.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 6, 2026CISA-ADP
Assessed Apr 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/wing3e/public_exp/issues/25 | [email protected] | ExploitIssue TrackingTechnical Analysis |
| https://vuldb.com/submit/785034 | [email protected] | ExploitTechnical Description |
| https://vuldb.com/vuln/355398 | [email protected] | AdvisoryExploitPartial Content |
| https://vuldb.com/vuln/355398/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| imprvhub mcp-browser-agent | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Apr 6, 2026 | New CVE Received | [email protected] |