A server‑side request forgery vulnerability exists in the customAxios function of adafap’s api‑mcp component (app/api/proxy/route.ts). Attackers can manipulate the URL argument to cause the server to initiate HTTP requests to arbitrary internal or external hosts. This weakness maps to CWE‑918, highlighting that the application fails to validate or sanitize outbound request destinations. The flaw can be triggered remotely and does not require local user interaction or elevated privileges, allowing potential exposure of sensitive resources or exploitation of internal services.

The vulnerable product is adafap’s api‑mcp. No fixed release is currently available because the project follows a rolling‑release model and the vendor has not yet issued a patch. Any deployment built from code before commit 92b9a5d04acfec165c7d4ef852496593aa87be06 may be compromised until an update is released.

The CVSS base score of 6.9 classifies the flaw as medium severity. Although EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, the remote SSRF capability makes it a notable threat. Adversaries can craft requests to the proxy endpoint from outside the network, directing the server to access unrestricted destinations, thereby facilitating data exfiltration, lateral movement, or internal reconnaissance.