CVE-2026-19984 | jkawamoto mcp-florence2 up to 0.3.13 __init__.py get_images src server-side request forgery (Issue 59)

A vulnerability identified as critical has been detected in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulation of the argument src causes server-side request forgery.

This vulnerability appears as CVE-2026-19984. The attack may be initiated remotely. In addition, an exploit is available.

It is recommended to change the configuration settings.

The vendor explains: “For deployments where SSRF protection is required, I recommend routing all HTTP(S) requests through an SSRF-safe proxy server. This approach mitigates the vulnerability without requiring changes to the mcp-florence2 source code.”