CVE-2025-6514criticalCode execution2025-07-09
CVE-2025-6514: mcp-remote exposed to OS command injection via untrusted MCP server connections
mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
What it is
mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
How to check
- Affected: mcp-remote (npm) >= 0.0.5, < 0.1.16.
- Compare your installed version with the range above (command below).
How to fix
- Upgrade mcp-remote to 0.1.16 or later.
npm ls mcp-remoteSources
More advisories for this tool
- criticalCVE-2026-32871: FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
- criticalCVE-2025-49596: MCP Inspector proxy server lacks authentication between the Inspector client and proxy
- highCVE-2026-104850: MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server
- highCVE-2026-59950: MCP Python SDK: WebSocket server transport does not support Host/Origin validation