Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

HIGH 8.8CVE-2026-26118 · GHSA-hhfx-wfvq-7g9c · PYSEC-2026-2669 · Published 10/03/2026 · updated 17/06/2026

In short

CVE-2026-26118 is a HIGH (CVSS 8.8) vulnerability affecting Azure.Mcp, msmcp-azure, azure mcp server (microsoft).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.7% of all vulnerabilities.
Fix: update to 1.0.2, 2.0.0-beta.17, 2.0.0b17, 2.0.0 or later.

Server-Side Request Forgery (SSRF) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

NVD description

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

NuGet

≥ 1.0.0, < 1.0.2≥ 2.0.0-beta.1, < 2.0.0-beta.17

1.0.22.0.0-beta.17

PyPI

≥ 2.0.0b14, < 2.0.0b17

2.0.0b17

= 2.0.0< 2.0.0

2.0.0

npm

≥ 1.0.0, < 1.0.2≥ 2.0.0-beta.1, < 2.0.0-beta.17

1.0.22.0.0-beta.17