CVE-2026-108542 | 021is elvix-sdk up to 0.10.1 MCP Request src/mcp/index.ts path server-side request forgery

October 10, 2026 Yanac

A vulnerability was found in 021is elvix-sdk up to 0.10.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery.

This vulnerability is identified as CVE-2026-108542. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More