mcp-remote vulnerabilities (npm)

1 vulnerability.

• mcp-remote npm OS command injection in mcp-remote when connecting to untrusted MCP servers CVE-2025-6514 Public exploitFix available EPSS 77.0% 9.6 CriticalJuly 9, 2025