CVE-2026-5832

High

Published: 09 April 2026

Published

09 April 2026

Modified

24 April 2026

KEV Added

—

Patch

—

CVSS Score 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS Score 0.0006 18.4th percentile

Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-5832 is a high-severity SSRF (CWE-918) vulnerability. Its CVSS base score is 7.3 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 18.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Protocol-Specific Risks risk domain.

The strongest mitigations our analysis identified are NIST 800-53 SC-7 (Boundary Protection) and SI-10 (Information Input Validation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploit Public-Facing Application (T1190). What defenders deploy: see the NIST 800-53 controls recommended below.

Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

SI-10 Information Input Validation good match

prevent

Directly mitigates SSRF by requiring validation of the source/url argument to ensure only legitimate and safe URLs are processed by the affected functions.

SC-7 Boundary Protection good match

prevent

Boundary protection enforces network-level restrictions on outbound HTTP requests from the vulnerable server, preventing forged requests to internal or unauthorized external resources.

AC-4 Information Flow Enforcement partial match

prevent

Information flow enforcement policies limit the destinations to which the HTTP server can send requests, blocking SSRF attempts to unapproved internal services.

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

attack.mitre.org →

Why these techniques?

The CVE describes an unauthenticated remote SSRF vulnerability in a public-facing HTTP interface (functions like test_http_endpoint), directly enabling exploitation of a public-facing application as per T1190.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

A weakness has been identified in atototo api-lab-mcp up to 0.2.1. This affects the function analyze_api_spec/generate_test_scenarios/test_http_endpoint of the file src/mcp/http-server.ts of the component HTTP Interface. This manipulation of the argument source/url causes server-side request forgery. The attack is possible to…

be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Deeper analysisAI

CVE-2026-5832 is a server-side request forgery (SSRF) vulnerability in the atototo api-lab-mcp software up to version 0.2.1. It affects the HTTP Interface component, specifically the functions analyze_api_spec, generate_test_scenarios, and test_http_endpoint in the file src/mcp/http-server.ts. The flaw arises from improper handling of the source/url argument, allowing manipulation that leads to SSRF.

Remote attackers can exploit this vulnerability without authentication or user interaction, as indicated by the CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Successful exploitation enables limited impacts on confidentiality, integrity, and availability, potentially allowing attackers to forge requests to internal or external resources from the vulnerable server.

Advisories note that the project was informed early via an issue report at https://github.com/atototo/api-lab-mcp/issues/4 but has not responded. No patches or mitigations are mentioned in available references, including the project repository at https://github.com/atototo/api-lab-mcp/ and VulDB entries at https://vuldb.com/submit/789765 and https://vuldb.com/vuln/356288. A public exploit is available at https://github.com/BruceJqs/public_exp/issues/6, increasing the risk of attacks.