Description
MCP Inspector小于版本0.14.1存在未授权访问漏洞，未经身份验证的攻击者能够通过标准输入输出启动MCP命令。
MCP Inspector小于版本0.14.1存在未授权访问漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ddpoc.com/DVB-2025-9910.html
https://www.anquanfuwu.net/article/detail/6853b07714037f0e4935dee4
https://avd.aliyun.com/detail?id=AVD-2025-49596
https://nvd.nist.gov/vuln/detail/CVE-2025-49596
https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-7f8r-222p-6f5g
https://www.oligo.security/blog/critical-rce-vulnerability-in-anthropic-mcp-inspector-cve-2025-49596
https://cloud.tencent.com/developer/article/2566875
https://www.recordedfuture.com/blog/anthropic-mcp-inspector-cve-2025-49596
http://www.xtcaq.com/nd.jsp?id=9162