PT-2025-36620 · Npm · @Modelcontextprotocol/Inspector

Published 2025-09-08 · Updated 2025-09-08

OSV

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

An XSS flaw exists in the MCP Inspector local development tool when it renders a redirect URL returned by a remote MCP server. If the Inspector connects to an untrusted server, a crafted redirect can inject script into the Inspector context and, via the built-in proxy, be leveraged to trigger arbitrary command execution on the developer machine. Version 0.16.6 hardens URL handling/validation and prevents script execution.

Thank you to the following researchers for their reports and contributions:

• Raymond (Veria Labs)
• Gavin Zhong, [e-mail] & Shuyang Wang, [e-mail].

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

CWE-84

Related Identifiers

GHSA-G9HG-QHMF-Q45M

Affected Products

@Modelcontextprotocol/Inspector

References · 6

• https://osv.dev/vulnerability/GHSA-g9hg-qhmf-q45m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58444 · Security Note
• https://github.com/modelcontextprotocol/inspector · Note
• https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-g9hg-qhmf-q45m · Note
• https://github.com/modelcontextprotocol/inspector/commit/650f3090d26344a672026b737d81586595bb1f60 · Note
• https://npmjs.com/package/@modelcontextprotocol/inspector/v/0.16.6 · Note