GitHub Advisoryadvisory · npm

GHSA-6xpm-ggf7-wc3p mcp-remote exposed to OS command injection via untrusted MCP server connections

CRITICAL Published 2025-07-09 Modified 2025-07-09 Official page ↗
Aliases
CVE-2025-6514
Ecosystem
npm
Packages
mcp-remote
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-78
Reviewed
2025-07-09

Affected packages

• npm mcp-remote: >= 0.0.5, < 0.1.16 → fixed in 0.1.16

Description

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

Related

Alias · CVE (1)

  • CVE-2025-6514 mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint… vulnerability

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References