Gavin Zhong

The MCP Inspector, a developer tool for testing and debugging MCP servers, is susceptible to a cross-site scripting issue. This issue occurs when connecting to untrusted remote MCP servers with a malicious redirect URI. Exploitation of this issue could allow interaction with the inspector proxy, potentially triggering arbitrary command execution.

Name of the Vulnerable Software and Affected Versions: wong2 mcp-cli version 1.13.0 Description: A flaw has been identified in the `redirectToAuthorization` function within the oAuth Handler component, specifically in the file `/src/oauth/provider.js`. This manipulation results in OS command injection, potentially allowing remote execution of commands. The attack is considered to have high complexity and is reportedly difficult to exploit. The exploit has been published and may be utilized. The vendor was contacted regarding this disclosure but did not respond. Recommendations: Update to a version with commit 3562966 or later. As a temporary workaround, consider disabling the `redirectToAuthorization` function until a patch is available.

A vulnerability was found in the function `set attr` of the file `/comfy/utils.py`, which can lead to dynamically-determined object attributes. The attack can be launched remotely, but it has a high complexity and is considered difficult to exploit. The exploit has been disclosed to the public.

A vulnerability was found in the file /upload/image of the component, allowing for cross-site scripting through the manipulation of the `image` argument. This issue can be exploited remotely. The vendor was contacted about this disclosure but did not respond.

A critical issue affects the `run query` function of the `/query runner/python.py` file in the `getattr` Handler component, leading to a sandbox issue. The exploit has been disclosed publicly and may be used. The vendor was contacted about this disclosure but did not respond.

A problematic issue has been found in the Mail Verification Handler component, specifically affecting the `send email change user email` function. This issue leads to reliance on obfuscation or encryption of security-relevant inputs without integrity checking, allowing for potential remote attacks. The complexity of an attack is rather high, and the exploitation is known to be difficult.

A problematic vulnerability has been found in the CORS Handler component, specifically affecting the `is valid origin` function. The issue arises from the manipulation of the `localhost aliases` argument, leading to an origin validation error. This vulnerability can be exploited remotely, with a relatively high complexity of attack and difficult exploitability. The exploit has been publicly disclosed.

A critical issue exists in the run view Object Handler component within the `/aim/storage/query.py` file. The `RestrictedPythonQuery()` function is susceptible to remote manipulation via the `Query` argument, which leads to a sandbox bypass and potentially elevated privileges. This flaw allows an attacker to initiate the attack remotely.

A critical issue affects the ` getitem ` function of the `/docarray/data/torch dataset.py` file in the Web API component. This issue leads to improperly controlled modification of object prototype attributes, also known as 'prototype pollution'. The attack can be launched remotely.

A problematic issue was found in Zylon PrivateGPT, affecting an unknown part of the file settings.yaml. The manipulation of the `allow origins` argument leads to a permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely.

A problematic issue was found in the function `SvSetPropNodeMK2` of the file `sverchok/nodes/object nodes/getsetprop mk2.py` of the component Set Property Mk2 Node. This issue leads to improperly controlled modification of object prototype attributes, also known as 'prototype pollution'. The attack can be launched remotely. The exploit has been publicly disclosed.