This vulnerability in imprvhub mcp-browser-agent (up to version 0.8.0) involves improper handling of URL parameters in the CallToolRequestSchema function within src/handlers.ts. By manipulating request.params.name and request.params.arguments, an attacker can perform server-side request forgery, causing the server to send crafted requests to arbitrary destinations. The vulnerability is remotely exploitable and publicly disclosed. No vendor response or patch is currently available, and the product is not a cloud service, so remediation depends on vendor action or user mitigation.

Successful exploitation allows an attacker to coerce the vulnerable server to make arbitrary HTTP requests, potentially accessing internal resources or services not otherwise reachable. This can lead to information disclosure or further network-based attacks. The CVSS score of 5.3 reflects a medium impact with low complexity and no user interaction required. There are no known active exploits in the wild, but public disclosure increases the risk of exploitation attempts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider implementing network-level restrictions to limit outbound requests from the affected component or isolate the vulnerable service until a patch is released. Monitor for updates from the vendor or community for any forthcoming fixes or mitigations.