A vulnerability, which was classified as critical, was found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery.
This vulnerability appears as CVE-2026-19040. The attack may be performed from remote. In addition, an exploit is available.
You should upgrade the affected component.
