Medium severity4.2NVD Advisory· Published Oct 10, 2026

CVE-2026-108583

Description

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.

Affected products

Zotero Mcp/zotero-mcpllm-create
Range: 0.10.0-0.14.1

Patches

Vulnerability mechanics

References

github.com/54yyyu/zotero-mcp/blob/v0.14.1/src/zotero_mcp/tools/write.pynvd
github.com/54yyyu/zotero-mcp/issues/326nvd
hackmd.io/@haind/zotero-mcp-generic-url-metadata-ssrfnvd
www.vulncheck.com/advisories/zotero-mcp-0.10.0-through-0.14.1-ssrf-via-zotero-add-by-url-toolnvd

News mentions

No linked articles in our index yet.

cvss	0.273
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000