Tools AI Risk Radar ai-incident-0131
Incident record
MCP Fetch tool can request private network addresses
- Severity
- High
- Status
- Proof-of-concept
- Type
- Infra Vuln
- Target
- MCP reference Fetch and Everything servers through 2026.6.4
- Actor
- researcher
- CVE
- CVE-2026-104120
What happened
A supplied URL can make the reference MCP Fetch tool request private network addresses or cloud metadata. The public proof of concept affects mcp-server-fetch and mcp-server-everything through 2026.6.4. The 2 October CVE scores it 7.3 High under CVSS 3.1.
A proposed fix, pull request 4890, was closed without merging by 5 October. The advisory therefore supports treating the affected releases as exposed, subject to the networks the server can reach.
Sources
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-104120
- Researcher reportgithub.com/modelcontextprotocol/servers/issues/4492
- Closed fix proposalgithub.com/modelcontextprotocol/servers/pull/4890
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026