Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-81421

ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-side request forgery

Description

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component raw_sentry_api. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ddfourtwo sentry-selfhosted-mcp

  • 0.4.0affected

References