Server-Side Request Forgery in jkawamoto mcp-florence2 Plugin
CVE-2026-19984

5.3MEDIUM

Key Information:

Vendor

Jkawamoto

Status
Mcp-florence2
Vendor
CVE Published:
17 August 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-19984?

A security flaw in the jkawamoto mcp-florence2 plugin, specifically in the get_images function of src/mcp_florence2/init.py, allows for server-side request forgery. This vulnerability enables an attacker to manipulate input arguments and potentially exploit server weaknesses from remote locations. It is crucial for users to adjust their configuration settings to enhance security. The vendor recommends implementing an SSRF-safe proxy server to handle HTTP(S) requests, providing a protective measure without the need for altering the plugin's source code.

Affected Version(s)

mcp-florence2 0.3.0

mcp-florence2 0.3.1

mcp-florence2 0.3.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-19984 - Proof of Concept

References

https://vuldb.com/vuln/391184
vdb-entrytechnical-description
https://vuldb.com/vuln/391184/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-19984
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

TianyuLi (VulDB User)
VulDB CNA Team
.