Description
A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs of the component fetch-tools Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-31
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a server-side request forgery (SSRF) in the McpController endpoint of sdcb chats. An attacker can manipulate requests so that the server issues HTTP requests to arbitrary URLs. The issue can be triggered remotely and a public exploit is available. This allows remote actors to cause the application to reach external hosts.

Affected Systems

sdcb chats versions up to 1.12.0 are affected. The flaw resides in the McpController endpoint of the fetch-tools component, located in src/BE/web/Controllers/Users/Mcps/McpController.cs.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate risk. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. The remote nature of the flaw and public exploit suggest that an adversary could trigger unsolicited outbound traffic from the server, especially if the application has unrestricted network access. Without a vendor patch, the risk remains until mitigations such as network filtering or application hardening are applied.

Generated by OpenCVE AI on August 31, 2026 at 22:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade sdcb chats to a version that contains the SSRF fix as soon as a vendor patch is released.
  • If no patch is available, configure network controls to block or restrict outbound traffic from the application to untrusted destinations.
  • Enable comprehensive application logging and review logs for unexpected outbound requests to detect SSRF activity early.

Generated by OpenCVE AI on August 31, 2026 at 22:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 31 Aug 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 31 Aug 2026 20:00:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in sdcb chats up to 1.12.0. This affects the function McpController of the file src/BE/web/Controllers/Users/Mcps/McpController.cs of the component fetch-tools Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title sdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgery
First Time appeared Sdcb
Sdcb chats
Weaknesses CWE-918
CPEs cpe:2.3:a:sdcb:chats:*:*:*:*:*:*:*:*
Vendors & Products Sdcb
Sdcb chats
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Sdcb Chats
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-31T21:57:50.021Z

Reserved: 2026-08-31T09:46:25.778Z

Link: CVE-2026-82905

cve-icon Vulnrichment

Updated: 2026-08-31T21:50:13.658Z

cve-icon NVD

Status : Deferred

Published: 2026-08-31T20:17:15.840

Modified: 2026-08-31T22:17:33.157

Link: CVE-2026-82905

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-31T22:15:04Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)