Tools AI Risk Radar ai-incident-0300
Incident record
MCP fetch fixes private IPv6 address classification
- Severity
- Low
- Status
- Patched
- Type
- Infra Vuln
- Target
- mcp-server-fetch
- Actor
- researcher
What happened
The fetch server could accept an IPv6 site-local destination because its private-address classifier missed that range. Exploitation requires a routable destination. Version 2026.11.11 fixes the classifier; the advisory does not establish metadata theft.
Sources
- GHSA-3rxj-6jhw-qfv7 maintainer advisorygithub.com/modelcontextprotocol/servers/security/advisories/…
- Reference-server release v2.4.0github.com/modelcontextprotocol/servers/releases/tag/v2.4.0
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 November 2026