CVE-2026-81848

Name of the Vulnerable Software and Affected Versions cyberchitta scrapling-fetch-mcp versions prior to 0.2.3

Description A remote attacker can execute a manipulation leading to server-side request forgery (SSRF), a condition where the server is coerced into making unauthorized requests to an arbitrary destination. The issue resides in the s fetch page() and s fetch pattern() functions within the src/scrapling fetch mcp/ fetcher.py file.

Recommendations Update to version 0.2.3. As a temporary workaround, restrict the use of the s fetch page() and s fetch pattern() functions until the update is applied.