Collected research

Critical RCE Vulnerability in mcp-remote: CVE-2025-6514 Threatens LLM Clients

@jfrog · JFrog · 9 July 2025

Explains CVE-2025-6514 in mcp-remote, where an untrusted authorization endpoint can supply crafted metadata that reaches an operating-system command invocation. The write-up follows the OAuth discovery path to command injection and remote code execution in affected MCP clients.

Record

Researcher

@jfrog

Published by

JFrog

Date

9 July 2025

In the archive

• Collected in the 2025 research round

Tags

• mcp
• oauth
• command-injection
• rce
• ai-agent
• cve
• owasp-a03-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of @jfrog, first published at the original source. Preserved copies are kept so the citation survives its host.