This vulnerability in horizon921 mcpilot 0.1.0 involves server-side request forgery via manipulation of the serverBaseUrl parameter in the MCP API Call Endpoint. The affected code is located in client/src/app/api/mcp/call/route.ts. Exploiting this flaw allows an attacker to coerce the server into making arbitrary HTTP requests, potentially accessing internal resources or services. The issue was responsibly disclosed but remains unpatched as of the publication date. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges or user interaction required, with low confidentiality, integrity, and availability impacts. No cloud service is involved, and no vendor advisory or patch links are available.

An attacker can remotely exploit this SSRF vulnerability to make the affected server send arbitrary HTTP requests. This may lead to unauthorized access to internal systems or services reachable by the server, potentially exposing sensitive information or enabling further attacks. The CVSS score of 6.9 reflects a medium severity impact with limited confidentiality, integrity, and availability consequences. No known exploits are reported in the wild beyond the public exploit release.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates or patches. Until a fix is provided, consider implementing network-level restrictions to limit the server's ability to make arbitrary outbound requests, such as firewall rules or proxy filtering, to mitigate potential exploitation.