CVE-2025-49596 - CVE House

Back to Database

Status published Critical CVE-2025-49596

MCP Inspector proxy server lacks authentication between the Inspector client and proxy

9.4 CVSS

Vulnerability Description

The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio. Users should immediately upgrade to version 0.14.1 or later to address these vulnerabilities.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-49596

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from modelcontextprotocol

View All →

mcp-server-git has missing path validation when using --repository flag

mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files

mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations

DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost

DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost

Affected Vendor

modelcontextprotocol

View all reports →

Affected Software

inspector

Vulnerable Versions:

< 0.14.1

Timeline

Official Publish: June 13th, 2025

Last Modified: July 9th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1078 Valid Accounts

T1136 Create Account

T1098 Account Manipulation

Privilege Escalation

T1021 Remote Services

Lateral Movement