CVE-2025-6514

Name of the Vulnerable Software and Affected Versions mcp-remote versions 0.0.5 through 0.1.15

Description mcp-remote is a local proxy server that allows MCP clients to interact with remote MCP servers. The software is exposed to OS command injection when connecting to untrusted MCP servers. This occurs because the application fails to neutralize special elements in the response URL from the authorization endpoint, allowing a remote attacker to inject and execute arbitrary operating system commands on the host machine. On Windows, this can lead to full control over parameters, while on macOS and Linux, it allows the execution of arbitrary executables with limited parameter control. The package had over 437,000 downloads.

Recommendations Update mcp-remote to version 0.1.16 or later. Connect only to trusted MCP servers using secure connection methods such as HTTPS.