MCPA-2026-0091
mediumssrfCVSS 6.3
LudusMCP read_range_config server-side request forgery (CVE-2026-19367)
LudusMCP (npm: ludus-mcp) up to and including 1.0.24 is vulnerable to SSRF: src/tools/rangeConfig.ts (component read_range_config) passes any 'source' argument that starts with http:// or https:// directly to fetch() with no allowlist or network-range validation, so a poisoned tool call can make the server request loopback, private-network, or cloud-metadata URLs from its network position and read the responses (verified by unpacking the published ludus-mcp@1.0.24 tarball). The maintainer was notified via a public issue but no fixed release exists as of 2026-08-09, so this is recorded as last_affected 1.0.24.
Affected packages
| Ecosystem | Package | Affected versions |
|---|---|---|
| npm | ludus-mcp | >= 0, <= 1.0.24 |
Identifiers
CVE-2026-19367GHSA-6fh8-4v8j-r4gwCWE-918
References
- advisory https://github.com/advisories/GHSA-6fh8-4v8j-r4gw
- web https://nvd.nist.gov/vuln/detail/CVE-2026-19367
- web https://github.com/NocteDefensor/LudusMCP
Timeline
- Published: 2026-08-09