PT-2025-35147

CVE-2025-58062

Published

2025-08-28

Updated

2026-11-10

Description by

CVSS 4.0

7.3

High

MetricsAV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions openmcp-client versions prior to 0.1.12

Description openmcp-client, a VS Code plugin for MCP developers, contains a flaw where a malicious authorization server endpoint can be provisioned by an attacker when a user on a Windows platform connects to an attacker-controlled MCP server. This can lead to an OS command injection attack in the open() invocation, potentially compromising the client system.

Recommendations Update openmcp-client to version 0.1.12.

Exploitability

Exploit

Fix

Impacts

Researchers

Superboy-Zjc

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers