The vulnerability is located in the fetch function within src/utils/crawler.ts of the collect_corpus module. Manipulating the sitemap_url argument enables an attacker to trigger server‑side request forgery, causing the application to send HTTP requests to arbitrary URLs specified by the attacker. This flaw can be leveraged to access internal resources or interact with external systems, potentially leaking sensitive information or facilitating subsequent attacks. The public exploit demonstrates that remote exploitation is possible.

Vendors affected are houtini‑ai, product voice‑analyser‑mcp, versions up to and including 2.1.1. Any installation running those versions is vulnerable.

The CVSS base score of 5.3 indicates moderate severity. EPSS data is unavailable, and the vulnerability has not been listed in the CISA KEV catalog. Because a public exploit exists, the risk of exploitation is real. Attackers would need only the ability to provide a malicious sitemap_url to the fetch endpoint, a low barrier that suggests the flaw could be abused in unprotected environments.