CVE-2026-7221

TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery

CVSS 6.9 MEDIUMEPSS 0.3%CWE-918

Vexday Risk Score

33Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 6.9EPSS 0.3%KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado

Lifecycle

28 Apr 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2.17.1 is able to address this issue. The patch is identified as 3f678a1e7bd400cd76469d61024097d4920dc6b5. It is recommended to upgrade the affected component.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

TencentCloudBase · CloudBase-MCP

public PoCs found — 1

cve_referencegithub.com/TencentCloudBase/CloudBase-MCP/issues/509unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://github.com/TencentCloudBase/CloudBase-MCP/https://github.com/TencentCloudBase/CloudBase-MCP/commit/3f678a1e7bd400cd76469d61024097d4920dc6b5 https://github.com/TencentCloudBase/CloudBase-MCP/issues/509 https://github.com/TencentCloudBase/CloudBase-MCP/pull/510 https://github.com/TencentCloudBase/CloudBase-MCP/releases/tag/v2.17.1 https://vuldb.com/submit/802230 https://vuldb.com/vuln/359821 https://vuldb.com/vuln/359821/cti