CVE-2026-19984: jkawamoto mcp-florence2 __init__.py get_images server-side request forgery
A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function getimages of the file src/mcpflorence2/init.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. It is recommended to change the configuration settings. The vendor explains: "For deployments where SSRF protection is required, I recommend routing all HTTP(S) requests through an SSRF-safe proxy server. This approach mitigates the vulnerability without requiring changes to the mcp-florence2 source code."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Route all HTTP(S) requests through an SSRF-safe proxy server to mitigate the server-side request forgery risk without changing the mcp-florence2 source code.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19984?
CVE-2026-19984 has a medium severity rating of 6.3.
How do I fix CVE-2026-19984?
To fix CVE-2026-19984, ensure you are using version 0.3.14 or later of jkawamoto mcp-florence2.
What type of vulnerability is CVE-2026-19984?
CVE-2026-19984 is classified as a server-side request forgery (SSRF) vulnerability.
Can CVE-2026-19984 be exploited remotely?
Yes, CVE-2026-19984 can be exploited remotely through the affected function.
What components are affected by CVE-2026-19984?
CVE-2026-19984 affects the get_images function in the file src/mcp_florence2/__init__.py of jkawamoto mcp-florence2 up to version 0.3.13.