CVE-2026-65056 Details

A server-side request forgery (SSRF) vulnerability has been identified in mcp-webresearch version 0.1.7. This vulnerability allows attackers to access internal network services by sending loopback, link-local, or cloud metadata addresses to the visit_page tool. The tool only checks the URL protocol and does not filter private or reserved IP ranges. Exploitation can be achieved by injecting prompts to manipulate the URL argument, directing the server's Playwright browser to internal endpoints, such as cloud instance metadata services. This results in the server returning sensitive internal page content, including credentials, into the model context.

It is recommended to add SSRF protection to the URL validation process in the visit_page tool. This should include filtering out loopback, link-local, and private IP ranges before navigation, and applying the same checks to any redirect hops. Additionally, similar protections should be implemented for the take_screenshot tool and URLs followed from search_google results.