{"id":"EUVD-2026-78923","enisaUuid":"d87cf9ff-372d-3e8c-a977-4953a17113bc","description":"mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, web_url_read passes a caller-supplied URL to the server-side fetch path while assertUrlAllowed() in src/url-reader.ts runs only when MCP_HTTP_HARDEN is enabled, even though MCP_HTTP_HARDEN is disabled by default in src/http-security.ts. In the default configuration, an attacker who influences the URL selected by a user or AI agent can make the server fetch loopback, private-network, or cloud metadata endpoint resources and return their contents into the model context. file:// URLs remain rejected, and the separate DNS-resolution and redirect-validation bypasses are outside this record. This issue is fixed in version 1.2.0.","datePublished":"Sep 15, 2026, 5:46:23 PM","dateUpdated":"Sep 15, 2026, 7:01:31 PM","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","references":"https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-q87f-qc2r-2gw4\nhttps://github.com/ihor-sokoliuk/mcp-searxng/issues/87#issuecomment-4645453694\nhttps://github.com/ihor-sokoliuk/mcp-searxng/commit/48e5ecdcb4166a60b94c252dbe74b0a318110ac4\nhttps://github.com/ihor-sokoliuk/mcp-searxng/releases/tag/v1.2.0\n","aliases":"CVE-2026-54688\nGHSA-q87f-qc2r-2gw4\n","assigner":"GitHub_M","epss":0.5,"enisaIdProduct":[{"id":"1649ab9a-77c8-3899-90f1-e34f922537e7","product":{"name":"mcp-searxng","vendor":{"name":"ihor-sokoliuk"}},"product_version":"\u003c 1.2.0"}],"enisaIdVendor":[{"id":"ca9e180d-d42f-3628-bf67-a4f064c17d2a","vendor":{"name":"ihor-sokoliuk"}}],"enisaIdVulnerability":[{"id":"5f075fdf-6919-3b73-afd6-cc721ff0805d","vulnerability":{"id":"CVE-2026-54688","description":"mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, web_url_read passes a caller-supplied URL to the server-side fetch path while assertUrlAllowed() in src/url-reader.ts runs only when MCP_HTTP_HARDEN is enabled, even though MCP_HTTP_HARDEN is disabled by default in src/http-security.ts. In the default configuration, an attacker who influences the URL selected by a user or AI agent can make the server fetch loopback, private-network, or cloud metadata endpoint resources and return their contents into the model context. file:// URLs remain rejected, and the separate DNS-resolution and redirect-validation bypasses are outside this record. This issue is fixed in version 1.2.0.","datePublished":"Sep 15, 2026, 5:46:23 PM","dateUpdated":"Sep 15, 2026, 7:01:31 PM","status":"PUBLISHED","baseScore":6.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","references":"https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-q87f-qc2r-2gw4\nhttps://github.com/ihor-sokoliuk/mcp-searxng/issues/87#issuecomment-4645453694\nhttps://github.com/ihor-sokoliuk/mcp-searxng/commit/48e5ecdcb4166a60b94c252dbe74b0a318110ac4\nhttps://github.com/ihor-sokoliuk/mcp-searxng/releases/tag/v1.2.0\n","enisa_id":"EUVD-2026-78923\n","assigner":"GitHub_M","epss":0.5,"dataProcessed":"Nov 11, 2026, 7:21:43 AM","vulnerabilityProduct":[{"id":"523b2eff-c202-3ed3-82f3-5a43c9698272","product":{"name":"mcp-searxng","vendor":{"name":"ihor-sokoliuk"}},"product_version":"\u003c 1.2.0"}],"vulnerabilityVendor":[{"id":"e8ae0ca9-2871-3915-89c4-7cc619395cdd","vendor":{"name":"ihor-sokoliuk"}}]}},{"id":"b632c455-df75-3d18-a365-fce52fc4cedc","vulnerability":{"id":"GHSA-q87f-qc2r-2gw4","description":"SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)","datePublished":"Aug 19, 2026, 7:23:08 PM","dateUpdated":"Aug 19, 2026, 7:23:08 PM","baseScore":0.0,"references":"https://github.com/ihor-sokoliuk/mcp-searxng/security/advisories/GHSA-q87f-qc2r-2gw4\nhttps://github.com/ihor-sokoliuk/mcp-searxng/issues/87#issuecomment-4645453694\nhttps://github.com/ihor-sokoliuk/mcp-searxng\nhttps://github.com/ihor-sokoliuk/mcp-searxng/releases/tag/v1.2.1\n","enisa_id":"EUVD-2026-78923\n","aliases":"GHSA-q87f-qc2r-2gw4\nCVE-2026-54688\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:51:44 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}