CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetch embedded metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero add by url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.