CVE-2026-122140— Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass

Quick assessment

Affected

germondai trawl

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Trawl 1.5.0 至 1.10.0 之前的版本存在服务端请求伪造（SSRF）漏洞，允许未认证的攻击者利用 IPv4 映射的 IPv6 地址绕过 MCP 出站 URL 策略。攻击者可以直接提供十六进制规范化地址（如），或通过重定向请求，从而访问回环地址、私有网络地址及云元数据服务，并读取其响应内容。

CVSS 5.8 · Medium Updated Nov 05, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass

Source: CVE Program / CVE List V5

Vulnerability Description

Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
germondai	trawl	1.5.0 ~ 1.10.0	-

II. Public POCs for CVE-2026-122140

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-122140

请登录查看更多情报信息。

Other References for CVE-2026-122140 (6)

https://github.com/germondai/trawl/commit/17cdb33a9a6a8200cf8f9fd6a57b295b04ee5173 patch
https://github.com/germondai/trawl/blob/v1.9.3/apps/api/src/outbound-policy.ts#L55-L56 technical-description
https://github.com/germondai/trawl/pull/263 patch issue-tracking
https://github.com/germondai/trawl/releases/tag/v1.10.0 release-notes
https://github.com/germondai/trawl/security/advisories/GHSA-mj45-84p2-v77q vendor-advisory
https://www.vulncheck.com/advisories/trawl-1.5.0-before-1.10.0-ssrf-via-ipv4-mapped-ipv6-mcp-policy-bypass third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-122140

IV. Related Vulnerabilities

Same weakness: CWE-918