Same SSRF flaw found in MCP servers from Google, Anthropic, Microsoft and Weaviate

·1 views

A security researcher discovered an identical Server-Side Request Forgery (SSRF) vulnerability in Model Context Protocol servers built independently by Google, Anthropic, Microsoft, and Weaviate across the first nine months of 2026. All four vendors shared a common flawed assumption: that a URL parameter supplied to their MCP servers could be trusted, when in reality any input processed by a language model must be treated as potentially attacker-controlled. Because MCP servers act on real-world resources — fetching web pages, querying databases, or driving browsers — a malicious URL injected via prompt manipulation could redirect requests to internal networks, metadata endpoints, or admin panels. Google's flaw was assigned CVE-2026-14540 with a CVSS v4.0 score of 8.0 (High) and was patched in v1.5.0, while Anthropic's and Microsoft's servers lacked allowlists and failed to block private or link-local IP ranges. The researcher noted the root cause was not a coding error unique to any one team, but a shared architectural misconception about the trust boundary between language models and the servers they control.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Builds AI Content Strategy Agent That Retains and Learns from Past Decisions

A developer has built ContentMind, an AI-powered content strategy agent designed to retain and apply historical context rather than treating each request as a fresh prompt. The system stores synthetic performance data for a fictional tech education brand, converting it into persistent memory via a service called Hindsight. When a user submits a new strategy query, the agent retrieves only relevant past memories — such as topic performance, audience preferences, and prior feedback — to inform its recommendation. The application is built with Next.js, TypeScript, and Tailwind CSS, using Supabase for authentication, Hindsight for memory storage, and Groq for generating final recommendations. The core innovation is a retain-recall-decide loop that allows the agent to improve its suggestions over time based on accumulated experience.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer fixes AI hallucination bug by moving counting logic out of the LLM

A developer building a customer support agent discovered that the underlying language model was producing inaccurate contact counts, sometimes undercounting or overcounting due to rephrased complaints. The root cause was that the prompt asked the model to both classify issues and count them — a task that blends judgment with deterministic arithmetic. The fix separated these responsibilities: the model now only classifies each interaction, while structured facts are stored in a memory layer called Hindsight and counted using standard code. This approach made the escalation logic auditable, since the final response includes both the computed count and the model's explanation for easy cross-checking. The developer noted that combining a vector-style retrieval store with structured fact storage eliminated the need to maintain two separate data systems in sync.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Converting M4A to MP3 on Windows saves almost no space, tests show

A developer tested Windows 11's built-in audio encoders and found that M4A and MP3 files produced from the same source audio differed in size by only 0.6%, or about 1,458 bytes. The reason is that Windows applies identical 192kbps bitrates to both formats by default, so the size gap reflects container overhead rather than any codec efficiency advantage. While AAC is technically a more efficient codec than MP3, Windows' preset system never assigns it a lower bitrate to demonstrate that benefit. The only practical reason to convert M4A to MP3 is compatibility — such as for car stereos or upload platforms that reject AAC files. The developer also noted that each lossy-to-lossy conversion degrades audio quality further, and that small timing differences introduced by encoders can cause audible clicks when stitching clips together.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

TypeScript 6.0 flag lets developers use .ts extensions in imports for monorepos

TypeScript 6.0 introduces the --allowImportingTsExtensions flag, which permits developers to use .ts file extensions directly in import statements without triggering the TS1479 compiler error. Previously, monorepo teams had to build complex path-mapping workarounds because TypeScript blocked explicit .ts extensions in source imports, often causing silent failures at bundle time. The flag does not rewrite or emit imports itself — it simply removes the compile-time restriction, leaving actual path resolution to downstream tools like Vite, esbuild, or Turbopack, which already handle .ts paths natively. For monorepo setups, this means cross-package import errors surface earlier during type-checking rather than failing silently at production build time. Developers are advised to use the flag only in bundler-driven workflows, as enabling it without a custom loader will break native Node.js execution.

0 comments Read more at DEV Community