CVE-2026-19367: NocteDefensor LudusMCP read_range_config rangeConfig.ts server-side request forgery
A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/rangeConfig.ts of the component readrangeconfig. The manipulation of the argument Source leads to server-side request forgery. The attack may be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19367?
The severity of CVE-2026-19367 is classified as medium, with a score of 6.3.
What type of vulnerability is CVE-2026-19367?
CVE-2026-19367 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
How do I fix CVE-2026-19367?
To fix CVE-2026-19367, ensure proper validation and sanitization of input to the read_range_config functionality.
What is affected by CVE-2026-19367?
CVE-2026-19367 affects the NocteDefensor LudusMCP version 1.0.24, specifically the src/tools/rangeConfig.ts file.
What is the risk associated with CVE-2026-19367?
The risk associated with CVE-2026-19367 is rated at 46, indicating a significant potential for exploitation.