The vulnerability resides in the downloadReport function within feedmob fm‑mcp‑servers, allowing manipulation of the downloadUrl parameter to trigger arbitrary outbound HTTP requests from the server. This flaw, classified as CWE‑918, gives an attacker the capacity to cause the server to access any URL, which can lead to internal data disclosure or the compromise of internal services. Because the attack is limited to a local environment, a malicious user must have access to the server itself, but the effect can still be significant if the server is privileged or has access to other network resources.

The problem affects feedmob fm‑mcp‑servers version 0.0.3. No other versions are explicitly listed in the CNA data, and it is unclear whether earlier releases are also impacted. If the component is being run at this version or a superseded variant without the fix, the SSRF vulnerability applies.

The CVSS score of 4.8 places the issue in the moderate risk category. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, indicating that it is not yet a known widespread exploitation vector. Because the attack vector is limited to a local environment, the risk is constrained to those who can reach the server directly. However, the ability to generate outbound calls can still be leveraged for internal pivoting or data exfiltration if the server has access to other internal resources. The likely attack path thus involves a local compromise followed by an SSRF-based redirect to internal or external targets. Since no official patch is available, organizations must mitigate by either upgrading if a newer version appears or hardening the endpoint and outbound traffic to limit potential damage.