SSRF Vulnerability in adafap api-mcp (CVE-2026-19374)

The adafap api-mcp component is susceptible to server-side request forgery (SSRF) via improper validation of the 'url' argument within the 'customAxios' function located in 'app/api/proxy/route.ts'. This vulnerability exists in versions up to the commit hash 92b9a5d04acfec165c7d4ef852496593aa87be06. Because the product follows a continuous, rolling-release delivery model, there are no defined version numbers to track for patching. An unauthenticated remote attacker can supply a malicious URL to the proxy endpoint, forcing the application to perform requests to internal services or external targets on behalf of the server. This can lead to unauthorized information disclosure or interaction with restricted internal infrastructure. As of the time of reporting, the maintainers have not issued a response or a patch for this finding.

Impact

Successful exploitation allows remote attackers to perform SSRF, potentially gaining unauthorized access to internal resources, cloud metadata services, or auxiliary network infrastructure. The impact is elevated by the lack of input sanitization in the proxy function, which provides a direct vector for internal network scanning and data exfiltration from private endpoints.

Recommendation

• Implement strict URL allowlisting or validation in 'app/api/proxy/route.ts' to ensure the 'url' argument passed to 'customAxios' corresponds to approved, non-sensitive domains.
• Apply network-level egress filtering on the server hosting the affected application to restrict outbound requests to only necessary and known-safe destinations.
• Review web access logs for requests to 'app/api/proxy/route.ts' where the 'url' parameter contains internal IP addresses (e.g., 169.254.169.254, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16).
• Monitor for anomalous outbound traffic from the affected service container or host to prevent exfiltration or internal probing.