MCP Remote RCE Via Oauth

Tim Peck@timpeck

•updated Sep 15, 2025•2•0•114

Detects potential remote code execution via a malicious OAuth URL in the mcp-remote proxy tool, indicative of CVE-2025-6514 exploitation.