The vulnerability in Kira-Pgr PromptShopMCP up to commit 5bc0cd17358e19a5415d11a531088170d7b81452 resides in the download_image function of the Image-Toolkit-MCP-Server component. By manipulating the image_url parameter, an attacker can perform server-side request forgery (SSRF), potentially causing the server to make unauthorized requests. The product follows a rolling release model, so no fixed or affected version numbers are available. The vendor has not issued a patch or official remediation, and the vulnerability was disclosed publicly with exploit code available. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to induce the server to make arbitrary HTTP requests, which may lead to information disclosure or interaction with internal systems not otherwise accessible. The impact is rated medium severity with limited confidentiality, integrity, and availability impact as per the CVSS 4.0 vector. There is no evidence of active exploitation in the wild at this time.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no fix is published, users should monitor the vendor's channels for updates. In the meantime, restricting outbound HTTP requests from the server or implementing input validation and sanitization on the image_url parameter may reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.