Threat · curated 10 Sep 2026

CVE Record: CVE-2026-19957

First reported today cve.org

Coverage timeline

Single-source advisory — first reported, latest, and curated coincide.

Why it matters

CVE-2026-19957 affects an MCP server, a component that agentic AI systems use to fetch external resources, so an SSRF here lets attackers pivot to internal services through the agent's tool-calling layer.

CVE-2026-19957 is a server-side request forgery (SSRF, CWE-918) vulnerability in graphlit graphlit-mcp-server 1.0.1, where manipulation of the url argument in the fetch function of src/tools.ts (ssrf-test Endpoint) lets a remote attacker force server-side requests. VulDB rates it CVSS 5.3-6.3 (medium), notes the exploit is publicly available, and reports the project was informed but has not responded.