CVE-2026-94051: 0717376 cowork_bench pdf-tools-mcp server.py ControlFlowNode server-side request forgery
A vulnerability was found in 0717376 coworkbench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the file localservers/pdf-tools-mcp/pdftoolsmcp/server.py of the component pdf-tools-mcp. Performing a manipulation of the argument pdffilepath results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be initiated remotely, but the CVSS vector indicates that the attacker needs low-level privileges. No user interaction is required.
Which deployments are affected?
The affected component is pdf-tools-mcp, specifically the ControlFlowNode function in local_servers/pdf-tools-mcp/pdf_tools_mcp/server.py. The issue affects the project through commit d943e75bc0fc8e3b27141979300cd8cbcd1e890d; fixed release versions are not available because the project uses a rolling release.
Is public exploitation information available?
Yes. An exploit has been made public, increasing the likelihood that attackers could attempt to use the SSRF condition.
What can be done while a fix is unavailable?
No vendor workaround is provided in the available data. Prioritize restricting low-privileged remote access to the affected pdf-tools-mcp functionality and review uses of the pdf_file_path argument, which is the identified manipulation point.
Has the project responded to the report?
The project was notified early through an issue report, but no response had been reported as of the available information.