Executive brief
GoMarble's Facebook Ads MCP Server is a tool for integrating with Facebook's advertising platform via the Model Context Protocol. A server-side request forgery (SSRF) vulnerability in the pagination function allows remote attackers to make unauthorized requests to internal or external systems, potentially exposing sensitive data or enabling lateral movement within a network.
Technical details
The vulnerability is a server-side request forgery (SSRF) flaw in the fetch_pagination_url function within server.py of facebook-ads-mcp-server version 0.1.0. The vulnerability stems from insufficient validation of URLs before making HTTP requests, allowing an attacker to craft malicious pagination parameters that redirect requests to arbitrary internal or external systems. The attack is network-accessible and requires no authentication. An attacker can leverage this to probe internal infrastructure, bypass firewalls, or retrieve sensitive data from restricted endpoints. A patch (commit 4e53875aa22e8991c2fa4a7660d86e1caba66659) is available and should be applied immediately.
Affected products
- GoMarble facebook-ads-mcp-server 0.1.0
Timeline
- 2026-08-16: disclosed
- 2026-08-16: patched: Patch commit 4e53875aa22e8991c2fa4a7660d86e1caba66659