CVE-2026-108583: 54yyyu Zotero-Mcp

Medium severity, CVSS 4.2.

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zotero_add_by_url, causing requests to loopback, private, or link-local hosts directly or via redirects, leaking citation meta-tags and error details.

Affected products

• 54yyyu Zotero-Mcp: from 0.10.0, up to and including 0.14.1

Published 2026-10-10. Last modified 2026-10-10.