CVE-2026-65968 · Package
NO FIX YET · SEE WHAT TO DO
ideon, a self-hosted visual workspace, blocks server-side requests to private addresses by matching host strings, and misses the hex-compressed IPv4-mapped IPv6 form Node produces. An authenticated user who registers an MCP server at such an address can make the server fetch loopback services and the cloud metadata endpoint.
first public Jul 3, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that self-host ideon and let users register MCP servers or OAuth endpoints with URLs. Exposure depends on whether untrusted or lower-privilege users can add such URLs and whether the server can reach loopback or cloud metadata. Instances on version 0.9.4 or later are not affected.
Not affected if no-user-registered-mcp-urls, version-0.9.4-or-later
Who cares cloud, ideon, mcp, self-hosted
0.9.4 are affected.validateUrlForSSRF in lib/oauth/ssrf-protection.ts and validateMcpUrl in lib/security/validators.ts.0.9.4 or later.ideon is a self-hosted visual workspace. Prior to version 0.9.4, validateUrlForSSRF() / safeFetch() in lib/oauth/ssrf-protection.ts (and the parallel validateMcpUrl() in lib/security/validators.ts) perform SSRF host-blocking by string/regex matching on new URL(url).hostname. Their IPv6 branch only recognises the textual forms ::1, fe80:/fc00:/fd00: prefixes, and the dotted-decimal IPv4-mapped form ::ffff:127.x. It does not recognise the WHATWG-canonical IPv4-mapped-IPv6 host that Node emits for a mapped address, which is hex-compressed and bracket-wrapped: [::ffff:7f00:1] for 127.0.0.1, [::ffff:a9fe:a9fe] for 169.254.169.254. An authenticated user who registers a STREAMABLE_HTTP / SSE MCP server with URL http://[::ffff:7f00:1]:PORT/ (loopback) or http://[::ffff:a9fe:a9fe]/ (cloud metadata) passes both guards, and the server-side OAuth-discovery action then fetches that host, yielding server-side request forgery to loopback and to the cloud metadata service. This issue has been patched in version 0.9.4.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.