GHSA-hhfx-wfvq-7g9c: Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
GHSA-hhfx-wfvq-7g9c · CVE-2026-26118 · PYSEC-2026-2669
- Advisory ID
- DURIN-MCP-2026-000002
- Severity
- high
- Publication state
- published
- Updated
Summary
Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
This is a public advisory summary. Its publication state does not establish whether a particular deployed connection is affected or has been remediated.
Complete the browser check below for affected versions, remediation, revision history and attributed assessment evidence.