Security Advisory

CVE-2026-74858

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-17 15:15:16

Last updated 2026-08-18 13:37:10

Assigner VulDB

CVSS score not scored

State PUBLISHED

Description

A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.

← Browse all CVEs View on cve.org ↗