CVE-2025-6514Crítica · CVSS 9.6EPSS 77,03%Corrección disponibleOS command injection in mcp-remote when connecting to untrusted MCP serversmcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URLmcp-remoteNode.jsActualiza a 0.1.16Publicación 9 de julio de 2025Actualización 9 de julio de 2025Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗