Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-94051: cowork_bench pdf-tools-mcp can be forced to make external requests
CVE-2026-94051 · published 29 days ago
Summary
The pdf-tools-mcp component in cowork_bench lets an attacker supply a crafted pdf_file_path value that makes the server contact any URL it chooses. This remote request can expose internal resources or leak data. Apply the latest code updates as soon as they are released, or temporarily block or strictly validate the pdf_file_path input to stop the unwanted requests.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| 0717376 | cowork_bench | d943e75bc0fc8e3b27141979300cd8cbcd1e890d |
Original advisory text
0717376 cowork_bench pdf-tools-mcp server.py ControlFlowNode server-side request forgery
A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the file local_servers/pdf-tools-mcp/pdf_tools_mcp/server.py of the component pdf-tools-mcp. Performing a manipulation of the argument pdf_file_path results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94051... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-94051 Vendor Advisory
- https://vuldb.com/vuln/407980/cti
- https://vuldb.com/vuln/407980
- https://vuldb.com/cve/CVE-2026-94051
- https://vuldb.com/submit/949604
- https://github.com/0717376/cowork_bench/issues/1
- https://github.com/Xh1Xxhg/public_exp/issues/7
- https://github.com/0717376/cowork_bench/
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
2.1
Low
Type
CWE-918Server-Side Request Forgery (SSRF)
Timeline
Published20 Sep 2026
Updated19 Oct 2026
First seen20 Sep 2026
Track software like this
Free during beta