What is GHSA-hhfx-wfvq-7g9c?

GHSA-hhfx-wfvq-7g9c is a security advisory published by GitHub Security Advisories with High severity. Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

Which CVE IDs does GHSA-hhfx-wfvq-7g9c cover?

GHSA-hhfx-wfvq-7g9c covers the following CVE IDs: CVE-2026-26118. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hhfx-wfvq-7g9c?

GHSA-hhfx-wfvq-7g9c has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-hhfx-wfvq-7g9c?

GHSA-hhfx-wfvq-7g9c affects 5 products, including: nuget/Azure.Mcp:\u003e= 2.0.0-beta.1, \u003c 2.0.0-beta.17; nuget/Azure.Mcp:\u003e= 1.0.0, \u003c 1.0.2; npm/@azure/mcp:\u003e= 2.0.0-beta.1, \u003c 2.0.0-beta.17; pip/msmcp-azure:\u003e= 2.0.0b14, \u003c 2.0.0b17; npm/@azure/mcp:\u003e= 1.0.0, \u003c 1.0.2.

GHSA-hhfx-wfvq-7g9cHighCVSS 8.8

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

Vendor

GitHub Security Advisories

Published

March 10, 2026

Last Modified

March 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-26118 →

📋 Description

Server-Side Request Forgery (SSRF) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

🎯 Affected products5

nuget/Azure.Mcp:>= 2.0.0-beta.1, < 2.0.0-beta.17
nuget/Azure.Mcp:>= 1.0.0, < 1.0.2
npm/@azure/mcp:>= 2.0.0-beta.1, < 2.0.0-beta.17
pip/msmcp-azure:>= 2.0.0b14, < 2.0.0b17
npm/@azure/mcp:>= 1.0.0, < 1.0.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-26118
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26118
https://github.com/microsoft/mcp/commit/804ff60293206c4d8e832f772097238561bf2c34
https://github.com/microsoft/mcp/releases/tag/Azure.Mcp.Server-1.0.2
https://github.com/microsoft/mcp/releases/tag/Azure.Mcp.Server-2.0.0-beta.17
https://github.com/advisories/GHSA-hhfx-wfvq-7g9c