Vulnerability · Published May 4, 2026 · Assigned by VulDB

CVE-2026-7729pixelsock directus-mcp MCP index.ts validateUrl server-side request forgery

Medium 6.3

In plain English

A medium-severity server-side request forgery in directus-mcp from pixelsock. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.2%top 88.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in pixelsock directus-mcp 1.0.0. This issue affects the function validateUrl of the file index.ts of the component MCP Interface. Performing a manipulation of the argument fileUrl results in server-side request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

Affected products (as reported)

Vendor	Product	Versions
pixelsock	directus-mcp	1.0.0

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-360904 | pixelsock directus-mcp MCP index.ts validateUrl server-side request forgery vdb-entry, technical-description
VDB-360904 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
Submit #807539 | pixelsock directus-mcp 1.0.0, Commit 77758625355d105364eeaeac9afec2f743fe369b Server-Side Request Forgery third-party-advisory
https://github.com/pixelsock/directus-mcp/issues/13 issue-tracking
https://github.com/pixelsock/directus-mcp/pull/14 issue-tracking, patch
https://github.com/BruceJqs/public_exp/issues/36 exploit, issue-tracking
https://github.com/pixelsock/directus-mcp/ product