An attacker can manipulate the URL argument passed to the puppeteer_navigate function in src/puppeteer/index.ts and force the server to make outbound HTTP requests to arbitrary destinations. This server‑side request forgery can expose internal network services, exfiltrate data, or facilitate further lateral movement. The vulnerability is exploitable remotely and has been publicly disclosed, indicating that malicious actors could already target vulnerable instances.

The flaw affects ShadowCloneLabs GlutamateMCPServers up to commit e2de73280b01e5d943593dd1aa2c01c5b9112f78. Because the project uses a rolling‑release continuous delivery model, no specific version numbers are disclosed; any deployment running the affected code base is potentially vulnerable.

The CVSS score of 6.9 reflects a moderate severity, and the EPSS score of < 1 % indicates a very low probability of exploitation at this time. The vulnerability is not listed in the CISA KEV catalog. Exploitation would require the attacker to supply a crafted URL to the vulnerable endpoint, which can be performed from an arbitrary remote location, then the server will issue an outbound request.