{
 "id": "AIR-2026-0125",
 "slug": "cve-2026-58485-mcp-searxng-susceptible-to-server-side-reques",
 "title": "CVE-2026-58485: mcp-searxng susceptible to server-side request forgery",
 "summary": "mcp-searxng validates only literal hostnames before DNS resolution occurs, failing to block private or loopback addresses. Attackers can supply specially crafted hostnames to connect the MCP server to internal destinations.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "mcp-searxng"
 ],
 "incident_date": "2026-09-15",
 "incident_date_precision": "day",
 "first_reported": "2026-09-15",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58485",
   "publisher": "NVD",
   "title": "CVE-2026-58485: mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG.",
   "published_at": "2026-09-15"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-58485",
  "ssrf",
  "mcp"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}