MCP Inspector Pre-Auth XSS Leading to RCE (CVE-2025-58444)

github.com 2025-09-10查看中文 →

Security AdvisoryCVE-2025-58444Highmodelcontextprotocol

Affected:

MCP Inspector < 0.16.6

Fixed in:

0.16.6

Referenced CVEs: CVE-2025-58444

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Privilege Escalation Vulnerability in @neo4j/graphql (CVE-2026-13669) 2026-08-19 Fix: Stricter validation of pre-negotiated values in RabbitMQ Java client frame reader 2026-08-19 RabbitMQ Java Client FrameReader FrameMax Validation Bypass Fix Analysis 2026-08-19 RabbitMQ Java Client DoS Vulnerability Fix and Code Analysis 2026-08-19 RabbitMQ Java Client frame_max Protocol Bypass Vulnerability (CVE-2025-61634) 2026-08-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive