AI AgentHigh
CVE-2026-108583: zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows at…
- Occurred
- Oct 10, 2026
- Published
- Oct 10, 2026
- Source
- NVD CVE
Summary
zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.
Tags
- CVE
- CVE-2026-108583
- cvss:MEDIUM
- agent-fail:injection-direct
- agent-fail:authorization
- agent-cause:missing-guardrail
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Agent vulnerability allows prompt injection to access internal services via SSRF, causing data leakage.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8