CVE-2026-81093

Name of the Vulnerable Software and Affected Versions MCP server versions prior to 0.9.12

Description The get-html-skeleton tool allows for Server-Side Request Forgery (SSRF) because it fetches a user-supplied URL after performing only a syntax check. The handler in src/tools/common/get html skeleton.ts uses the isValidHttpUrl() function from src/utils/generic.ts, which only verifies that the string starts with an http or https scheme and is a valid URL format. It does not inspect the host name or the resolved address, allowing requests to loopback, link-local, and private IP ranges, including cloud provider instance metadata services. An attacker can use this to request internal endpoints reachable only from the host and retrieve sensitive information, such as instance credentials.

Recommendations Update to version 0.9.12, which removes the get-html-skeleton tool.