Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2025-6514

OS command injection in mcp-remote when connecting to untrusted MCP servers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mcp-remote

Default version status: unaffected

  • 0.0.5 to ≤ 0.1.15affected

References