CVE-2026-122140: Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass
Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses.
Event History
Frequently Asked Questions
Which deployments are exposed?
Trawl versions from 1.5.0 before 1.10.0 are affected where an unauthenticated attacker can cause the server to fetch an attacker-supplied URL through the MCP outbound URL policy.
What does an attacker need to exploit this issue?
No authentication or user interaction is required. The attacker needs to provide an IPv4-mapped IPv6 address in hex-normalized form, such as ::ffff:7f00:1, either directly or through a redirect.
What could an attacker access?
An attacker can bypass the outbound URL policy to fetch loopback, private-network, and cloud metadata services, and can read the responses returned by those services.
What should be done if the affected version is in use?
Upgrade Trawl to 1.10.0 or later. The provided data does not specify an alternative mitigation for deployments that cannot be upgraded immediately.