PT-2026-36758 · Pixelsock · Directus-Mcp

Brucejqs · Published 2026-05-04 · Updated 2026-05-04 · CVE-2026-7729

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pixelsock directus-mcp version 1.0.0

Description A flaw in the MCP Interface component allows for server-side request forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. This occurs through the manipulation of the fileUrl argument within the validateUrl() function located in the index.ts file. The attack can be executed remotely.

Recommendations As a temporary workaround, restrict the use of the validateUrl() function until the pending pull request is accepted and a fix is released.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-7729

Affected Products

Directus-Mcp

References · 9

• 🔥 https://github.com/BruceJqs/public_exp/issues/36 · Exploit
• https://github.com/pixelsock/directus-mcp/pull/14 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-7729 · Security Note
• https://github.com/pixelsock/directus-mcp/issues/13 · Note
• https://vuldb.com/submit/807539 · Note
• https://github.com/pixelsock/directus-mcp · Note
• https://vuldb.com/vuln/360904/cti · Note
• https://twitter.com/VulmonFeeds/status/2051175794089611754 · Twitter Post
• https://vuldb.com/vuln/360904 · Note