Vulnerability · Published Oct 10, 2026 · Assigned by VulnCheck

CVE-2026-108583zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool

Medium 4.2

In plain English

A medium-severity server-side request forgery in zotero-mcp from 54yyyu. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS 3.1)4.2Medium

Exploit odds (30 days)0.2%top 88.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.

Affected products (as reported)

Vendor	Product	Versions
54yyyu	zotero-mcp	0.10.0 – through 0.14.1

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

References

https://hackmd.io/@haind/zotero-mcp-generic-url-metadata-ssrf third-party-advisory
https://github.com/54yyyu/zotero-mcp/blob/v0.14.1/src/zotero_mcp/tools/write.py#L2035-L2089 technical-description
https://github.com/54yyyu/zotero-mcp/issues/326 related, issue-tracking
VulnCheck Advisory: zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool third-party-advisory