{
 "id": "AIR-2026-1098",
 "slug": "spring-ai-mcp-security-lacks-mandatory-ssrf-mitigations",
 "title": "Spring AI mcp-security Lacks Mandatory SSRF Mitigations",
 "summary": "Prior to version 0.1.9, the mcp-security framework in Spring AI fails to implement required SSRF mitigations for OAuth discovery URLs. This leaves deployments with Dynamic Client Registration enabled vulnerable to malicious internal or external URLs.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "mcp-security",
  "Spring AI"
 ],
 "incident_date": "2026-05-29",
 "incident_date_precision": "day",
 "first_reported": "2026-05-29",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45609",
   "publisher": "NVD",
   "title": "CVE-2026-45609: mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI.",
   "published_at": "2026-05-29"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-45609",
  "ssrf",
  "model_context_protocol"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}