Topic

Cve 2026 104120

Coverage tagged cve 2026 104120.

Articles: 1
Desk: 1

MCP fetch server SSRF CVE-2026-104120: no fix, CVSS 3.1 7.3 scored by VulDB, fix PR #4890 still a draft

elevatedAI Security Cve 2026 104120

MCP Fetch Server SSRF (CVE-2026-104120) Has a Public Exploit and No Fix

CVE-2026-104120 lets an agent steer the official MCP fetch tool to internal and cloud metadata addresses. A public exploit exists; fix PR #4890 is unmerged.

Oct 3 · 6 min