Description
A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/rangeConfig.ts of the component read_range_config. The manipulation of the argument Source leads to server-side request forgery. The attack may be initiated remotely. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NocteDefensor | LudusMCP | 1.0.24 | — |
References
- VDB-387234 | NocteDefensor LudusMCP read_range_config rangeConfig.ts server-side request forgery vdb-entry technical-description
- VDB-387234 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-19367 | CVE Analysis and Report third-party-advisory
- Submit #866263 | NocteDefensor LudusMCP 1.0.24 Server-Side Request Forgery third-party-advisory
- https://github.com/NocteDefensor/LudusMCP/issues/6 issue-tracking
- https://github.com/NocteDefensor/LudusMCP/ product