criticalATLS-2025-0002CVE-2025-49596

MCP Inspector: unauthenticated proxy endpoints allow remote code execution

Imported from public sources listed below. Verfy has not independently reproduced this issue.

Details

The proxy server of @modelcontextprotocol/inspector before 0.14.1 exposed endpoints without authentication or origin checks. A web page visited by the developer could reach the local proxy (for example through DNS rebinding) and make it launch commands over stdio. Version 0.14.1 added session-token authentication and origin validation. Upgrade to 0.14.1 or later and do not expose the inspector proxy to untrusted networks.

Affected

npm @modelcontextprotocol/inspector

Versions before 0.14.1. Fixed in 0.14.1.

# check what a project uses
$ npm ls @modelcontextprotocol/inspector

References

https://nvd.nist.gov/vuln/detail/CVE-2025-49596 (ADVISORY)
https://advisories.gitlab.com/pkg/npm/@modelcontextprotocol/inspector/CVE-2025-49596/ (ADVISORY)

Published in Verfy 2026-10-11 · modified 2026-10-11