mcp-remote exposed to OS command injection via untrusted MCP server connections

CRITICAL 9.6CVE-2025-6514 · GHSA-6xpm-ggf7-wc3p · Published 09/07/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
mcp-remote npm	`≥ 0.0.5, < 0.1.16`	`0.1.16`

Description

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

NVD description

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

References

nvd.nist.gov/vuln/detail/CVE-2025-6514 · ADVISORY
geelen/mcp-remote commit 607b226 · WEB
geelen/mcp-remote · PACKAGE
jfrog.com/blog/2025-6514-critical-mcp-remote-rce-vulnerability · WEB
research.jfrog.com/vulnerabilities/mcp-remote-command-injection-rce-jfsa-2025-001290844 · WEB
research.jfrog.com/vulnerabilities/mcp-remote-command-injection-rce-jfsa-2025-001290844

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free