AI agent vulnerability · Other MCP servers and tools

CVE-2026-26118: Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

highCVSS 3.1 8.8GHSA-hhfx-wfvq-7g9c

Server-Side Request Forgery (SSRF) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

Published Mar 10, 2026 · Updated Mar 12, 2026

Affected packages

Azure.Mcp

Ecosystem: NuGet
Affected: >= 2.0.0-beta.1, < 2.0.0-beta.17
Fixed in: 2.0.0-beta.17
Check: dotnet list package --include-transitive

Azure.Mcp

Ecosystem: NuGet
Affected: >= 1.0.0, < 1.0.2
Fixed in: 1.0.2
Check: dotnet list package --include-transitive

@azure/mcp

Ecosystem: npm
Affected: >= 2.0.0-beta.1, < 2.0.0-beta.17
Fixed in: 2.0.0-beta.17
Check: npm ls @azure/mcp

msmcp-azure

Ecosystem: PyPI
Affected: >= 2.0.0b14, < 2.0.0b17
Fixed in: 2.0.0b17
Check: pip show msmcp-azure

@azure/mcp

Ecosystem: npm
Affected: >= 1.0.0, < 1.0.2
Fixed in: 1.0.2
Check: npm ls @azure/mcp

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Server-Side Request Forgery (SSRF) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

Credited to alzimmermsft, vcolin7.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries