mediumresolved
facebook-ads-mcp-server SSRF (CVE-2026-19956)
Server-side request forgery in the fetch_pagination_url function let authenticated users drive requests from the server's network position. CVSS 5.3.
The fetch_pagination_url function issued requests to a URL supplied by the caller without restricting where it could point. An authenticated user could aim it at internal addresses and drive requests from the server's network position, a server-side request forgery. The issue scored CVSS 5.3 and was fixed in a single commit.
Takeaway
Any tool that fetches a caller-supplied URL can be pointed inward at metadata endpoints and internal services. Allowlist destinations and block requests to internal ranges at the server.
Sources
mcpssrfCVE-2026-19956