TencentCloudBase/CloudBase-MCP

TencentCloudBase/CloudBase-MCP

docs.cloudbase.net

Releases54

Frequency6 days 17 hours

Last Release 17 days ago

Stars1.03K

CloudBase MCP - Connect CloudBase to your AI Agent. Go from AI prompt to live app.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-7221 ↗	Apr 28, 2026Tuesday, 28 April 2026, 04:16	7.3 HIGH	7.5 HIGH
A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2.17.1 is able to address this issue. The patch is identified as 3f678a1e7bd400cd76469d61024097d4920dc6b5. It is recommended to upgrade the affected component.