zotero-mcp webpage imports can reach internal services

What happened

An agent-controlled webpage address can make the MCP server fetch a private, loopback or link-local destination through its metadata importer.

The CVE was published on 10 October; the original researcher publication date is unconfirmed. An agent must be induced to call the tool and have a writable Zotero backend. Readback is limited to recognised citation metadata rather than the complete response. The CNA gives CVSS 3.1 score 4.2. The earlier PDF-import issue is a separate, already guarded path. Patch status remains unconfirmed as of 11 October.