CVE-2026-19984 - jkawamoto mcp-florence2 __init__.py get_images server-side request forgery

Back Back to CVE browser

MEDIUM

jkawamoto mcp-florence2 init.py get_images server-side request forgery

Published Aug 17, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.37%

Description

A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. It is recommended to change the configuration settings. The vendor explains: "For deployments where SSRF protection is required, I recommend routing all HTTP(S) requests through an SSRF-safe proxy server. This approach mitigates the vulnerability without requiring changes to the mcp-florence2 source code."

Affected products

Vendor Jkawamoto Product Mcp-Florence2 Default
n/a
- Version
  0.3.0
  Status
  affected
  Constraints
  -
- Version
  0.3.1
  Status
  affected
  Constraints
  -
- Version
  0.3.10
  Status
  affected
  Constraints
  -
- Version
  0.3.11
  Status
  affected
  Constraints
  -
- Version
  0.3.12
  Status
  affected
  Constraints
  -
- Version
  0.3.13
  Status
  affected
  Constraints
  -
- Version
  0.3.2
  Status
  affected
  Constraints
  -
- Version
  0.3.3
  Status
  affected
  Constraints
  -
- Version
  0.3.4
  Status
  affected
  Constraints
  -
- Version
  0.3.5
  Status
  affected
  Constraints
  -
- Version
  0.3.6
  Status
  affected
  Constraints
  -
- Version
  0.3.7
  Status
  affected
  Constraints
  -
- Version
  0.3.8
  Status
  affected
  Constraints
  -
- Version
  0.3.9
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jkawamoto

Mcp-Florence2

n/a

Version	Status	Constraints
0.3.0	affected	-
0.3.1	affected	-
0.3.10	affected	-
0.3.11	affected	-
0.3.12	affected	-
0.3.13	affected	-
0.3.2	affected	-
0.3.3	affected	-
0.3.4	affected	-
0.3.5	affected	-
0.3.6	affected	-
0.3.7	affected	-
0.3.8	affected	-
0.3.9	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-60047
Advisory
https://github.com/jkawamoto/mcp-florence2/
product
https://github.com/jkawamoto/mcp-florence2/issues/59
exploitissue-tracking
https://vuldb.com/cve/CVE-2026-19984
third-party-advisory
https://vuldb.com/submit/873920
third-party-advisory
https://vuldb.com/vuln/391184
vdb-entrytechnical-description
https://vuldb.com/vuln/391184/cti
signaturepermissions-required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-60047		Advisory
https://github.com/jkawamoto/mcp-florence2/		product
https://github.com/jkawamoto/mcp-florence2/issues/59		exploitissue-tracking
https://vuldb.com/cve/CVE-2026-19984		third-party-advisory
https://vuldb.com/submit/873920		third-party-advisory
https://vuldb.com/vuln/391184		vdb-entrytechnical-description
https://vuldb.com/vuln/391184/cti		signaturepermissions-required