Server-Side Request Forgery in mixelpixx Model Context Protocol Handler

CVE-2026-5470

What is CVE-2026-5470?

A vulnerability exists in the mixelpixx Google-Research-MCP software affecting the content-extractor.service.ts file. This issue arises from insecure handling of the URL argument in the extractContent function, leading to potential server-side request forgery. Attackers can exploit this vulnerability remotely, resulting in unauthorized access to internal resources. Although specific version details for affected releases are not readily available due to the product's rolling release model, public disclosure of this exploit poses a significant risk to users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References