Threats tagged 'ghsa-m2hf-r4mh-rrq8'

CVE-2026-19373 is a server-side request forgery (SSRF) vulnerability in PhialsBasement KoboldCPP-MCP-Server version 1.0.0. The issue exists in the makeRequest function within the BaseConfigSchema component, where manipulation of the apiUrl argument can lead to SSRF attacks. The vulnerability allows attackers to make unauthorized requests from the local host. The vendor has been informed but has not yet responded or issued a fix. The CVSS score is 4.8, indicating a medium severity level.