Mcp Browser Agent

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:imprvhub:mcp-browser-agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorImprvhub (b3989f31-6539-5737-917c-1dbd88c96a8a)
ProductMcp Browser Agent (e3a0f529-ac1e-58dd-bebb-d7a98d050994)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5607 vulnerable 2026-06-08 08:07:03.895194 imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery
MEDIUM (6.3)
A security vulnerability has been detected in imprvhub mcp-browser-agent up to 0.8.0. This impacts the function CallToolRequestSchema of the file src/handlers.ts of the component URL Parameter Handler. The manipulation of the argument request.params.name/request.params.arguments leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-06T00:15:13.901Z
Updated: 2026-04-06T15:04:11.595Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.