Verfy Advisories

Vulnerabilities in agent tooling

Public, sourced advisories for MCP servers and agent tools, in the OSV format with ATLS-YYYY-NNNN IDs and CVE aliases. Feed: /api/v1/advisories.

criticalATLS-2025-0001CVE-2025-6514source: public record

mcp-remote: OS command injection from a malicious MCP server's OAuth authorization_endpoint

npm · mcp-remote

criticalATLS-2025-0002CVE-2025-49596source: public record

MCP Inspector: unauthenticated proxy endpoints allow remote code execution

npm · @modelcontextprotocol/inspector

highATLS-2025-0003CVE-2025-53109source: public record

MCP filesystem server: symlinks inside an allowed directory escape the allowed-directory boundary

npm · @modelcontextprotocol/server-filesystem

highATLS-2025-0004CVE-2025-53110source: public record

MCP filesystem server: path prefix collision bypasses the allowed-directory check

npm · @modelcontextprotocol/server-filesystem

Entries marked "source: public record" come from public CVE records and were not independently reproduced by Verfy. New advisories are added by pull request with at least one public source; a submission portal is planned for a later phase.