Evidence · DiggingBeagle record
CVE-2026-108583: zotero-mcp SSRF in zotero_add_by_url
Published VulnCheck CNA JSON, October 10, 2026 15:57 UTC. Affects zotero-mcp 0.10.0 through 0.14.1 and describes a generic URL-fetch SSRF with possible prompt-injection steering, CWE-918, CVSS v4.0 2.3 and v3.1 4.2. Original CNA statement is not evidence of observed field compromise.
- Published
- Oct 10, 2026
- Publisher
- VulnCheck CNA via OpenCVE
- Source role
- primary disclosure
Evidence record
Published VulnCheck CNA JSON, October 10, 2026 15:57 UTC. Affects zotero-mcp 0.10.0 through 0.14.1 and describes a generic URL-fetch SSRF with possible prompt-injection steering, CWE-918, CVSS v4.0 2.3 and v3.1 4.2. Original CNA statement is not evidence of observed field compromise.
Claim-level citations (2)
- supportszotero-mcp generic URL importer could reach internal hosts (CVE-2026-108583): VulnCheck published CVE-2026-108583 on October 10, 2026 for zotero-mcp 0.10.0 through 0.14.1, classifying the issue as CWE-918 with CVSS v4.0 2.3 and CVSS v3.1 4.2.
CVE_RECORD.cveMetadata; containers.cna.affected, problemTypes and CVSS metrics
- supportszotero-mcp generic URL importer could reach internal hosts (CVE-2026-108583): Nguyen Dinh Hai reports that zotero_add_by_url invokes _fetch_embedded_metadata for generic webpages and fetches the supplied URL using requests.get without private-destination validation or redirect re-checks.
CNA description of the generic metadata fetch; distinct from June issue 326