medium6.3
CVE-2026-74858
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9.
Impact
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Product | Affected versions |
|---|---|
| Jae-Jae Fetcher-Mcp | before 0.3.9. |
Versions were read from the advisory text. No structured product data has been published for this record yet.