| Package | Affected versions | Patched versions |
|---|---|---|
| @modelcontextprotocol/inspector | < 0.16.6 | 0.16.6 |
An XSS flaw exists in the MCP Inspector local development tool when it renders a redirect URL returned by a remote MCP server. If the Inspector connects to an untrusted server, a crafted redirect can inject script into the Inspector context and, via the built-in proxy, be leveraged to trigger arbitrary command execution on the developer machine. Version 0.16.6 hardens URL handling/validation and prevents script execution.
Thank you to the following researchers for their reports and contributions:
- Raymond (Veria Labs)
- Gavin Zhong, [email protected] & Shuyang Wang, [email protected].
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free