Critical mcp-remote RCE (CVE-2025-6514) Lets Attackers Run OS Commands on 437k+ Installations
A CVSS 9.6 flaw in mcp-remote (CVE‑2025‑6514) lets any untrusted MCP server inject OS commands into clients, enabling full remote code execution. The bug spans versions 0.0.5‑0.1.15 and has been downloaded over 437,000 times, exposing a large swath of AI tool users to compromise.