PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-27826] Otto Support - SSRF and Token Passthrough with MCP

bishopfox.com | blog | CVE-2026-27826 | #ai-security | #cloud | #rce | #mcp | #ssrf | #token-passthrough | #cve-2026-27826 | #markitdown
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

SSRF and token passthrough in MCP servers: the mcp-atlassian SSRF-to-RCE chain (CVE-2026-27826), MarkItDown's SSRF, and an OpenClaw marketplace plugin flaw show why destination validation matters.
CVE
CVE-2026-27826
Published
Collected

Related coverage

blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
blog · crowdstrike.com
CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
Falcon Adversary OverWatch now includes 24/7 managed hunting for AI applications and autonomous agent activity, and deeper, telemetry-driven hunting for Google Cloud.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
Back