CVE-2026-7221

TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery

CVSS 6.9 MEDIUMEPSS 0.3%CWE-918

Vexday Risk Score

33Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 6.9EPSS 0.3%KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado

Ciclo de vida

28 abr 2026Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2.17.1 is able to address this issue. The patch is identified as 3f678a1e7bd400cd76469d61024097d4920dc6b5. It is recommended to upgrade the affected component.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Productos afectados

TencentCloudBase · CloudBase-MCP

PoCs públicas encontradas — 1

cve_referencegithub.com/TencentCloudBase/CloudBase-MCP/issues/509no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

https://github.com/TencentCloudBase/CloudBase-MCP/https://github.com/TencentCloudBase/CloudBase-MCP/commit/3f678a1e7bd400cd76469d61024097d4920dc6b5 https://github.com/TencentCloudBase/CloudBase-MCP/issues/509 https://github.com/TencentCloudBase/CloudBase-MCP/pull/510 https://github.com/TencentCloudBase/CloudBase-MCP/releases/tag/v2.17.1 https://vuldb.com/submit/802230 https://vuldb.com/vuln/359821 https://vuldb.com/vuln/359821/cti