Executive brief
The mcp-dominican-layer is an MCP server tool that provides access to Dominican Congress legislative information. A server-side request forgery (SSRF) vulnerability allows attackers to manipulate the csvUrl parameter to force the server to send HTTP requests to unauthorized destinations, including internal systems or attacker-controlled servers, potentially exposing sensitive data or enabling lateral movement within a network.
Technical details
The vulnerability is a server-side request forgery (SSRF) in the parse-csv tool handler within src/index.ts. The csvUrl parameter is validated only for basic URL format using Zod's z.string().url() check, but is then passed directly to axios.get() without any destination allowlisting or network boundary validation. An attacker can supply a malicious csvUrl targeting internal IP ranges (127.0.0.1, private networks), localhost services, or attacker-controlled external hosts. The server will send the HTTP request from its network context and return the response as parsed CSV, enabling full-read SSRF attacks. The vulnerable code path is: MCP client input → csvUrl handler → axios.get(csvUrl) → outbound request. No patch is currently available as the project uses rolling releases and has not yet responded to the early security disclosure.
Affected products
- EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82
Timeline
- 2026-06-25: disclosed: GitHub issue #2 opened reporting SSRF vulnerability
- 2026-08-13: advisory: CVE-2026-19751 published