The vulnerability resides in the download_image function of the server.py module within the Image-Toolkit-MCP-Server component of Kira-Pgr PromptShopMCP. By manipulating the image_url argument, an attacker can cause the server to make HTTP requests to arbitrary destinations, enabling a server-side request forgery (SSRF) attack. This function is reachable from a remote request as the product is a public web service, and the exploit has been released publicly, which means attackers can exploit it without special permissions.

The affected vendor is Kira-Pgr, product PromptShopMCP. Versions up to commit 5bc0cd17358e19a5415d11a531088170d7b81452 contain the vulnerability. The project uses a rolling-release model, so no fixed release is identified. The component involved is Image-Toolkit-MCP-Server.

The CVSS base score is 5.3, indicating moderate severity. EPSS is not available, so we cannot quantify exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. Because the flaw is remote and the exploit code is public, the likelihood of real-world attacks is non-negligible, especially for systems that do not constrain outbound traffic. Attackers could use the server to reach internal resources or bypass network restrictions, potentially exposing sensitive data or facilitating further lateral movement.