OASB
Attacks/MCP Exploitation/MCP-006
CRITICALCWE-918

MCP-006 MCP SSRF to Cloud Metadata

MCP Exploitation: Attempts to exploit MCP tool call parameters (path traversal, command injection, SSRF)

Description

Attempts SSRF via MCP fetch_url to cloud metadata endpoint

Remediation

Block requests to private/internal IP ranges (169.254.x.x, 10.x.x.x, 172.16-31.x.x, 192.168.x.x).

Severity

CRITICAL

OASB Control

2.3

CWE

CWE-918
PreviousMCP-005 MCP Command Injection via PipeNextMCP-007 MCP SSRF to Internal Service