Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

/in

Cybersecurity researchers have discovered a critical vulnerability in the open-source mcp-remote project that could result in the execution of arbitrary operating system (OS) commands.
The vulnerability, tracked as CVE-2025-6514, carries a CVSS score of 9.6 out of 10.0.
“The vulnerability allows attackers to trigger arbitrary OS command execution on the machine running mcp-remote when it

The Hacker News – ​Read More

UK Charges Four in ‘Scattered Spider’ Ransom GroupUK Charges Four in ‘Scattered Spider’ Ransom GroupFormer Mexican president investigated over allegedly taking bribes from spyware industryFormer Mexican president investigated over allegedly taking bribes from spyware...