PT-2026-60897 · Unknown · Meta-Ads-Mcp
CVE-2026-54549
·
Published
2026-07-17
·
Updated
2026-07-23
CVSS v3.1
8.3
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
meta-ads-mcp version 1.0.113
Description
An unauthenticated remote attacker can perform a Server-Side Request Forgery (SSRF) when the server is deployed using the
streamable-http transport. The upload ad image tool accepts an image url parameter that is passed to an HTTP fetch helper without validation of the scheme, host, or IP address. This allows an attacker to force the server to make outbound requests to internal targets, such as localhost services, RFC 1918 private network addresses, or cloud instance metadata endpoints like http://169.254.169.254/. The issue is exacerbated by the use of follow redirects=True, which can be used to bypass simple filters via redirect chains. Furthermore, the authorization middleware only checks for the presence of a non-empty Bearer token, while actual credential validation occurs only after the image download is attempted, allowing the SSRF to trigger before authentication is verified.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, restrict access to the
upload ad image tool or avoid using the image url parameter until a patch is available.SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Meta-Ads-Mcp