A server-side request forgery (SSRF) issue allows unauthenticated attackers to bypass the MCP outbound URL policy. This is achieved by using IPv4-mapped IPv6 addresses, where attackers provide hex-normalized addresses such as `::ffff:7f00:1` directly or through redirects. This allows the unauthorized fetching of loopback, private, and cloud metadata services to read their responses.