A Server-Side Request Forgery vulnerability in the HashiCorp consul-mcp-server allows unauthenticated remote attackers to perform unauthorized requests against internal services.

The application is susceptible to Server-Side Request Forgery (CWE-918) due to improper validation of user-supplied input. This vulnerability allows an unauthenticated attacker to force the server to make requests to arbitrary locations, effectively bypassing network access controls.

With a CVSS score of 8.6, this vulnerability poses a significant risk to internal infrastructure security. An attacker can leverage this flaw to probe internal networks, access sensitive metadata endpoints, or interact with services that are not exposed to the public internet, potentially leading to data exfiltration or further unauthorized access.

Immediate Action: Update the consul-mcp-server to version 0.1.4 or later to apply the necessary security fixes provided by HashiCorp.

Proactive Monitoring: Review application logs for suspicious outbound network requests originating from the consul-mcp-server, particularly those directed toward internal IP ranges or sensitive cloud metadata services.

Compensating Controls: Implement strict egress filtering at the network level to prevent the server from initiating unauthorized connections to internal resources.

Public Exploit Available: Unknown.

The high severity of this SSRF vulnerability necessitates an immediate update to the patched version. Organizations utilizing consul-mcp-server should treat this as a high-priority remediation to prevent potential lateral movement and unauthorized access to internal services.