8.8
Élevée
CVE-2026-26118 Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a…
Description
Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Azure MCP Server Tools 1.0.0 (npm) 1.0 | 1.0.0 → < 1.0.2 | 1.0.2 |
| Azure MCP Server Tools 1.0.0 (NuGet) 1.0 | 1.0.0 → < 1.0.2 | 1.0.2 |
| Azure MCP Server Tools 2.0.0 (npm) 2.0 | 2.0.0-beta.1 → < 2.0.0-beta.17 | 2.0.0-beta.17 |
| Azure MCP Server Tools 2.0.0 (NuGet) 2.0 | 2.0.0-beta.1 → < 2.0.0-beta.17 | 2.0.0-beta.17 |
| Azure MCP Server Tools 2.0.0 (PyPi) 2.0 | 2.0.0-beta.1 → < 2.0.0-beta.17 | 2.0.0-beta.17 |