Skip to content
Sign in
8.8 High

CVE-2026-26118 Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a…

Description

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

Affected products and versions

Product Affected versions Fixed in
Azure MCP Server Tools 1.0.0 (npm) 1.0 1.0.0 → < 1.0.2 1.0.2
Azure MCP Server Tools 1.0.0 (NuGet) 1.0 1.0.0 → < 1.0.2 1.0.2
Azure MCP Server Tools 2.0.0 (npm) 2.0 2.0.0-beta.1 → < 2.0.0-beta.17 2.0.0-beta.17
Azure MCP Server Tools 2.0.0 (NuGet) 2.0 2.0.0-beta.1 → < 2.0.0-beta.17 2.0.0-beta.17
Azure MCP Server Tools 2.0.0 (PyPi) 2.0 2.0.0-beta.1 → < 2.0.0-beta.17 2.0.0-beta.17
Track this CVE