CVE-2026-51994CRITICALCVSS 9.1

CVE-2026-51994

Published Sep 24, 2026·Updated Sep 25, 2026

NVD Description

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate header

Public Exploits & PoCs1 found

PoC: mcp-remote-oauth-security

Forensic audit of mcp-remote: seven OAuth trust-boundary advisories, five CVE records (CVE-2026-51994/51995/51996/51997/52001). Server-selected request path (CWE-918) run against loopback canaries in 58 stable releases, 0.1.32 to the current 0.14.3; selected code and namespace signatures under 12 other npm names; search blind spots above 350 KiB.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free