This vulnerability in horizon921 mcpilot 0.1.0 involves server-side request forgery via manipulation of the serverBaseUrl parameter in the MCP API Call Endpoint. An attacker can remotely trigger the server to send crafted requests to arbitrary destinations. The issue is located in client/src/app/api/mcp/call/route.ts. The project was informed early but has not provided a remediation or patch. The CVSS 4.0 score is 6.9 (medium), reflecting ease of exploitation and potential impact on confidentiality, integrity, and availability at a low to limited level.

Successful exploitation allows an unauthenticated remote attacker to cause the server to make arbitrary HTTP requests, potentially leading to information disclosure or interaction with internal systems not otherwise accessible. The impact is limited to the extent of the SSRF capabilities and the server's network environment. No known exploits are reported in the wild beyond the public exploit release. No direct evidence of data breach or system compromise is provided.

No official fix or patch is currently available as the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates. Until a patch is released, consider implementing network-level restrictions to limit the server's ability to make arbitrary outbound requests, such as firewall rules or egress filtering, to mitigate potential exploitation.