high severity · published 2026-08-13
The SSRF protection in auth-fetch-mcp fails to catch IPv4-mapped IPv6 loopback addresses written in hex-normalized form, so an attacker can slip past the private-IP check with a crafted URL. The AI assistant then fetches loopback or internal services that were supposed to be blocked.
CVE: CVE-2026-49857
Source: NVD
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 168 and your operating system.