0717376 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW 0717376 CVE published 2026-09-20

CVE-2026-94051

A vulnerability was found in cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. The function ControlFlowNode in local_servers/pdf-tools-mcp/pdf_tools_mcp/server.py is affected by a server-side request forgery vulnerability. The exploit has been made public and could be used. This product uses a rolling release for continuous delivery, so no version details for affected or updated releases are available.