GHSA-mj45-84p2-v77q: Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass

Published Nov 4, 2026

Updated

Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses.

Event History

Nov 4, 2026

CVE Published

via OSV·08:36 PM

Data Sourced

via OSV·08:36 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Trawl versions are affected?

Trawl 1.5.0 through versions before 1.10.0 are affected. Upgrading to 1.10.0 or later removes the affected version range.

Does exploitation require an authenticated account or user interaction?

No. The vulnerability is exploitable by an unauthenticated attacker and does not require user interaction.

What internal resources could an attacker reach?

An attacker can use IPv4-mapped IPv6 addresses, including hex-normalized forms such as ::ffff:7f00:1, to reach loopback services, private-network services, and cloud metadata services. The attacker can also use redirects to reach those targets and read their responses.

GHSA-mj45-84p2-v77q: Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass

Event History

Frequently Asked Questions

Which Trawl versions are affected?

Does exploitation require an authenticated account or user interaction?

What internal resources could an attacker reach?

Company

Resources

Contact

Frequently Asked Questions

Which Trawl versions are affected?

Does exploitation require an authenticated account or user interaction?

What internal resources could an attacker reach?