# CVE-2026-19753: Model Context Protocol mcp-rdf-explorer SSRF in explore_url

Source: https://junglewise.ai/threats/cve-2026-19753-model-context-protocol-mcp-rdf-explorer-ssrf-in-explore-url  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-13. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-19753 · Severity: high · CVSS 7.3 · Published 2026-08-13

mcp-rdf-explorer is a Model Context Protocol server that fetches RSS/OPML feeds from URLs and extracts data. The vulnerability allows an attacker to supply arbitrary URLs that the server will fetch on their behalf, enabling access to internal services, cloud metadata endpoints, and sensitive information that should not be exposed to remote attackers.

Vendors: [Model Context Protocol](https://junglewise.ai/threats/vendors/model-context-protocol).

## Quick answers

**Is CVE-2026-19753 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-19753 being exploited in the wild.

**How severe is CVE-2026-19753?** High severity, with a CVSS score of 7.3, published 13 August 2026.

**Which products and versions are affected?** Model Context Protocol Mcp-Rdf-Explorer 1.0.0.

**Is there a fix for CVE-2026-19753?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-19753 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-19753?** Check whether you run Model Context Protocol Mcp-Rdf-Explorer at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the explore_url function of src/mcp-rdf-explorer/server.py. The url parameter is passed directly to Python's requests.get() without any validation—no scheme restrictions, domain allowlisting, IP-range filtering, or timeout enforcement. An MCP client can invoke the explore_url tool with a malicious URL pointing to internal services (localhost, private IP ranges) or cloud metadata endpoints, causing the server process to make HTTP GET requests to attacker-controlled or restricted destinations. The vulnerability is trivially exploitable via direct tool invocation or through prompt injection in agent workflows. No fix or patch is currently available from the vendor, which did not respond to early disclosure.

## Affected products

- Model Context Protocol mcp-rdf-explorer 1.0.0

## Timeline

- 2026-06-25: disclosed
- 2026-08-13: advisory

## References

- [https://github.com/emekaokoye/mcp-rdf-explorer/issues/3](https://github.com/emekaokoye/mcp-rdf-explorer/issues/3)
- [https://vuldb.com/cve/CVE-2026-19753](https://vuldb.com/cve/CVE-2026-19753)