PT-2025-34167 · Mcp-Cli · Mcp-Cli

Gavin Zhong · Published 2025-08-20 · Updated 2025-08-21 · CVE-2025-9262

Positive Technologies · (AI Summary)

CVSS v3.1

5.6

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions:

wong2 mcp-cli version 1.13.0

Description:

A flaw has been identified in the `redirectToAuthorization` function within the oAuth Handler component, specifically in the file `/src/oauth/provider.js`. This manipulation results in OS command injection, potentially allowing remote execution of commands. The attack is considered to have high complexity and is reportedly difficult to exploit. The exploit has been published and may be utilized. The vendor was contacted regarding this disclosure but did not respond.

Recommendations:

Update to a version with commit 3562966 or later. As a temporary workaround, consider disabling the `redirectToAuthorization` function until a patch is available.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2025-9262

GHSA-P6RM-483J-37JF

Affected Products

Mcp-Cli

References · 14

• 🔥 https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e#proof-of-concept · Exploit
• 🔥 https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e · Exploit
• https://osv.dev/vulnerability/GHSA-p6rm-483j-37jf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9262 · Security Note
• https://github.com/wong2/mcp-cli · Note
• https://github.com/wong2/mcp-cli/pull/16 · Note
• https://github.com/wong2/mcp-cli/commit/35629664cc5d3aea4c3d083d075fe26e7c346b59 · Note
• https://twitter.com/CVEnew/status/1958397781954953358 · Twitter Post
• https://vuldb.com/?ctiid.320804 · Note
• https://t.me/cveNotify/132961 · Telegram Post
• https://t.me/CVEtracker/30539 · Telegram Post
• https://vuldb.com/?id.320804 · Note
• https://twitter.com/VulmonFeeds/status/1958450567413383350 · Twitter Post
• https://vuldb.com/?submit.631697 · Note