CVE-2026-58483: CWE-400: Uncontrolled Resource Consumption in ihor-sokoliuk mcp-searxng
mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read in src/index.ts passes a caller-supplied URL to readUrlContent() in src/url-reader.ts, where checkContentLength() treats a missing Content-Length header as an inconclusive preflight and the normal and error paths then consume the complete body with response.text(). A server that omits Content-Length can therefore bypass URL_READ_MAX_CONTENT_LENGTH_BYTES and force unbounded memory use. The resulting string is also processed by NodeHtmlMarkdown.translate(), increasing CPU consumption and allowing an unauthenticated HTTP client to cause denial of service. This issue is fixed in version 1.7.1.
AI Analysis
Technical Summary
The mcp-searxng server, which provides AI assistants with web search and URL-reading capabilities, has an uncontrolled resource consumption vulnerability (CWE-400) prior to version 1.7.1. The vulnerability occurs in the web_url_read function where a caller-supplied URL is passed to readUrlContent. If the HTTP response omits the Content-Length header, the checkContentLength function treats this as inconclusive and proceeds to consume the entire response body via response.text(), bypassing the URL_READ_MAX_CONTENT_LENGTH_BYTES limit. This unbounded memory consumption is followed by CPU-intensive processing through NodeHtmlMarkdown.translate(), enabling an unauthenticated HTTP client to cause a denial of service. The issue is resolved in version 1.7.1.
Potential Impact
An unauthenticated remote attacker can cause a denial of service by forcing the server to consume unbounded memory and CPU resources. This impacts availability but does not affect confidentiality or integrity. There are no known exploits in the wild at this time.
Mitigation Recommendations
Upgrade mcp-searxng to version 1.7.1 or later, where this vulnerability is fixed. No other mitigations are indicated by the vendor advisory.
CVE-2026-58483: CWE-400: Uncontrolled Resource Consumption in ihor-sokoliuk mcp-searxng
Description
mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read in src/index.ts passes a caller-supplied URL to readUrlContent() in src/url-reader.ts, where checkContentLength() treats a missing Content-Length header as an inconclusive preflight and the normal and error paths then consume the complete body with response.text(). A server that omits Content-Length can therefore bypass URL_READ_MAX_CONTENT_LENGTH_BYTES and force unbounded memory use. The resulting string is also processed by NodeHtmlMarkdown.translate(), increasing CPU consumption and allowing an unauthenticated HTTP client to cause denial of service. This issue is fixed in version 1.7.1.
CVSS v3.1
Score 7.5high
Affected software
ihor-sokoliuk
mcp-searxng
pkg:github/ihor-sokoliuk/mcp-searxngRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The mcp-searxng server, which provides AI assistants with web search and URL-reading capabilities, has an uncontrolled resource consumption vulnerability (CWE-400) prior to version 1.7.1. The vulnerability occurs in the web_url_read function where a caller-supplied URL is passed to readUrlContent. If the HTTP response omits the Content-Length header, the checkContentLength function treats this as inconclusive and proceeds to consume the entire response body via response.text(), bypassing the URL_READ_MAX_CONTENT_LENGTH_BYTES limit. This unbounded memory consumption is followed by CPU-intensive processing through NodeHtmlMarkdown.translate(), enabling an unauthenticated HTTP client to cause a denial of service. The issue is resolved in version 1.7.1.
Potential Impact
An unauthenticated remote attacker can cause a denial of service by forcing the server to consume unbounded memory and CPU resources. This impacts availability but does not affect confidentiality or integrity. There are no known exploits in the wild at this time.
Mitigation Recommendations
Upgrade mcp-searxng to version 1.7.1 or later, where this vulnerability is fixed. No other mitigations are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-30T20:21:25.811Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aa9882355bf5e2cf52fe312
Added to database: 09/15/2026, 18:02:11 UTC
Last enriched: 09/15/2026, 18:16:49 UTC
Last updated: 09/16/2026, 03:08:36 UTC
Views: 13
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.