Get real-time updates on Telegram
CVE-2026-65056: mcp-webresearch 0 through 0.1.7
CVE-2026-65056. CVSS 3.1 base score 8.2 (HIGH, Vendor/CNA). EPSS 0.00409 (percentile 0.34063), scored 24-Oct-2026.
Affected technology
mcp-webresearch · 0 through 0.1.7
mzxrai
Description’s affected range: 0.1.7
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Active user interaction
What an attacker can do
Attackers can steer the LLM-controlled URL argument through prompt injection to navigate the server's Playwright browser to internal endpoints such as cloud instance metadata services, causing the server to return sensitive internal page content including credentials into the model context. Vendor/CNA’s CVSS 4.0 assessment (base score 8.3/10) rates confidentiality impact as high; integrity impact as low; availability impact as none.
- CWE
- CWE-918
- CCR priority
- 32.9 /100 (P4)
- CVSS 3.1
- 8.2 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N · Vendor/CNA
- EPSS
- 0.00409 · percentile 0.34063 · 2026-10-24
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-25 01:28:19.133527+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-65056.html