CVE-2026-80347 | kazuph mcp-fetch up to 1.6.3 SSRF Guard isSafeUrl server-side request forgery

August 26, 2026 Yanac

A vulnerability identified as problematic has been detected in kazuph mcp-fetch up to 1.6.3. Affected by this vulnerability is the function isSafeUrl of the component SSRF Guard. The manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-80347. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More