CVE-2026-51994
mcp-remote
9.1
- Severity
- Critical
- Published
- September 24, 2026
- Last modified
- September 25, 2026
mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate header
CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
- CWE-918 Server-side request forgery