CVE-2025-59155

hackmd-mcp is a Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants. From 1.4.0 to before 1.5.0, hackmd-mcp contains a server-side request forgery (SSRF) vulnerability when the server is run in HTTP transport mode. Arbitrary hackmdApiUrl values supplied via the Hackmd-Api-Url HTTP header or a base64-encoded JSON query parameter are accepted without validation, allowing attackers to redirect outbound API requests to internal network services, access internal endpoints, perform network reconnaissance, and bypass network access controls. The stdio transport mode is not affected because it only accepts stdio requests. The issue is fixed in version 1.5.0, which enforces allowed endpoints and supports the ALLOWED_HACKMD_API_URLS environment variable. Users should update to 1.5.0 or later or apply documented mitigations such as switching to stdio mode, restricting outbound network access, or filtering the Hackmd-Api-Url header and related query parameter via a reverse proxy.

• CWE-918

• https://github.com/yuna0x0/hackmd-mcp/commit/43936c78a5bb3dedc74e8f080607a1125caa8c13
• https://github.com/yuna0x0/hackmd-mcp/security/advisories/GHSA-g5cg-6c7v-mmpw

Published

Sep 15, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-59149Suricata is a network IDS, IPS and NSM engine developed by t…6.2
• CVE-2025-5915A vulnerability has been identified in the libarchive librar…6.6
• CVE-2025-59150Suricata is a network IDS, IPS and NSM engine developed by t…7.5
• CVE-2025-59151Pi-hole Admin Interface is a web interface for managing Pi-h…8.2
• CVE-2025-59152Litestar is an Asynchronous Server Gateway Interface (ASGI) …7.5
• CVE-2025-59154Openfire is an XMPP server licensed under the Open Source Ap…5.9
• CVE-2025-59156Coolify is an open-source and self-hostable tool for managin…8.8
• CVE-2025-59157Coolify is an open-source and self-hostable tool for managin…8.8
• CVE-2025-59158Coolify is an open-source and self-hostable tool for managin…8
• CVE-2025-59159SillyTavern is a locally installed user interface that allow…9.6
• CVE-2025-5916A vulnerability has been identified in the libarchive librar…5.6
• CVE-2025-59160Matrix JavaScript SDK is a Matrix Client-Server SDK for Java…2.7