Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-49596 PoC — MCP Inspector 访问控制错误漏洞

Source
https://github.com/ashiqrehan-21/MCP-Inspector-CVE-2025-49596
Associated Vulnerability
Title:MCP Inspector 访问控制错误漏洞 (CVE-2025-49596)
Description:MCP Inspector是Model Context Protocol开源的一个MCP服务器的可视化测试工具。 MCP Inspector 0.14.1之前版本存在访问控制错误漏洞，该漏洞源于缺少认证，可能导致远程代码执行。
Description
MCP-Inspector-vulncheck is a Python script that checks if an MCP Inspector server is vulnerable to CVE-2025-49596. It tests whether the /sse endpoint responds to unauthenticated requests, indicating a potential security flaw. The script is simple to use and provides clear output on whether the target server is likely vulnerable or patched.
File Snapshot

 [4.0K]  /data/pocs/0df0ff2c4d2c3e052b807411c2c6b4efb1761e6d
├── [108K]  Checking_vuln.png
├── [306K]  Inspector_run.png
├── [1.2K]  MCP-Inspector-vulncheck.py
└── [1.7K]  readme.txt

0 directories, 4 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.