https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:01:19.788360+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-58444 CVE-2025-58444 — MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server 2026-10-07T12:01:19.803954+00:00

Affected: modelcontextprotocol inspector

The MCP inspector is a developer tool for testing and debugging MCP servers. A cross-site scripting issue was reported in versions of the MCP Inspector local development tool prior to 0.16.6 when connecting to untrusted remote MCP servers with a malicious redirect URI. This could be leveraged to interact directly with the inspector proxy to trigger arbitrary command execution. Users are advised to update to 0.16.6 to resolve this issue.