AI developer toolsBriefPublic record
mcp-remote OS command injection (CVE-2025-6514)
A malicious MCP server’s OAuth `authorization_endpoint` led to RCE on the client.
- Disclosed
What happened
- A malicious MCP server’s OAuth `authorization_endpoint` led to RCE on the client. Fixed: 0.1.16. 437k+ downloads (JFrog).
Live scores
Live scores
CVE-2025-6514- EPSS
- 0.770
very likely to be attacked soon - VEDAS
- 0.982
strong exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.