Detections
Analytics
CVE-2025-6514
critical
Description
mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
References
https://thehackernews.com/2026/08/how-mcp-servers-can-expose-enterprise.html
https://thehackernews.com/2025/07/critical-mcp-remote-vulnerability.html
https://github.com/patchwright/mcp-lint
https://github.com/boxed-dev/vibe-coding-security
https://github.com/pathakabhi24/LLM-MCP-Security-Field-Guide
https://github.com/darshjme/mcp-security-audit
https://github.com/Mybodycare/skills-mcps-all-in-one-panel
https://github.com/mattschaller/eslint-plugin-mcp-security
https://github.com/mattschaller/eslint-plugin-mcp
https://github.com/KGT24k/mcp-config-guard
https://github.com/dotsetlabs/overwatch
https://github.com/Pantheon-Security/medusa
https://github.com/galgantar/mcp-remote-cve
https://github.com/sm00thindian/mcp-cve-orchestrator
https://github.com/ChaseHCS/CVE-2025-6514
https://research.jfrog.com/vulnerabilities/mcp-remote-command-injection-rce-jfsa-2025-001290844/
https://jfrog.com/blog/2025-6514-critical-mcp-remote-rce-vulnerability
https://github.com/geelen/mcp-remote/commit/607b226a356cb61a239ffaba2fb3db1c9dea4bac