PT-2026-58827 · Mastergo Design · Mastergo-Magic-Mcp

Mcfly_Zhang · Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-15750

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcp getComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-15750

Produtos afetados

Mastergo-Magic-Mcp

Referências · 7

• 🔥 https://github.com/mastergo-design/mastergo-magic-mcp/issues/89 · Exploit
• https://vuldb.com/cve/CVE-2026-15750 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15750 · Nota de Segurança
• https://vuldb.com/vuln/378329 · Nota
• https://github.com/mastergo-design/mastergo-magic-mcp · Nota
• https://vuldb.com/vuln/378329/cti · Nota
• https://vuldb.com/submit/856633 · Nota