GitHub Advisoryadvisory · NuGet, npm, PyPI

GHSA-hhfx-wfvq-7g9c Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

HIGH Published 2026-03-10 Modified 2026-03-12 Official page ↗
Aliases
CVE-2026-26118
Ecosystem
NuGet, npm, PyPI
Packages
Azure.Mcp, @azure/mcp, msmcp-azure
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-918
Reviewed
2026-03-11

Affected packages

• NuGet Azure.Mcp: >= 2.0.0-beta.1, < 2.0.0-beta.17 → fixed in 2.0.0-beta.17 • NuGet Azure.Mcp: >= 1.0.0, < 1.0.2 → fixed in 1.0.2 • npm @azure/mcp: >= 2.0.0-beta.1, < 2.0.0-beta.17 → fixed in 2.0.0-beta.17 • PyPI msmcp-azure: >= 2.0.0b14, < 2.0.0b17 → fixed in 2.0.0b17 • npm @azure/mcp: >= 1.0.0, < 1.0.2 → fixed in 1.0.2

Description

Server-Side Request Forgery (SSRF) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

Related

Alias · CVE (1)

  • CVE-2026-26118 Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network. vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References