CVE-2025-5276: SSRF
All versions of the package mcp-markdownify-server are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-search-to-markdown, and youtube-to-markdown tools to issue requests and read the responses to attacker-controlled URLs, potentially leaking sensitive information.
Other sources
Versions of the package mcp-markdownify-server before 1.0.0 are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-search-to-markdown, and youtube-to-markdown tools to issue requests and read the responses to attacker-controlled URLs, potentially leaking sensitive information.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
mcp-markdownify-serverto a version that resolves this vulnerability.Fixed in 1.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5276?
CVE-2025-5276 is classified as a high severity vulnerability due to its potential for server-side request forgery (SSRF).
What impact does CVE-2025-5276 have on affected systems?
CVE-2025-5276 allows attackers to craft requests that can access internal resources, leading to potential data leaks or system compromise.
How can I fix CVE-2025-5276?
To mitigate CVE-2025-5276, update the mcp-markdownify-server package to the latest version that addresses the vulnerability.
Which versions of mcp-markdownify-server are affected by CVE-2025-5276?
All versions of the mcp-markdownify-server package are affected by CVE-2025-5276.
What should I do if I cannot update due to compatibility issues with CVE-2025-5276?
If unable to update, consider implementing network restrictions to limit access to vulnerable components as a temporary measure against CVE-2025-5276.