modelcontextprotocol

modelcontextprotocol inspector vulnerabilities

3 published CVEs name modelcontextprotocol inspector among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 1
Critical: 1
Known exploited: 0

Critical 1High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20252
20261

Newest CVEs

CVE-2026-119025
open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows
sindresorhus · open
High7.7
CVE-2025-58444
MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server
modelcontextprotocol · inspector
High8.6
CVE-2025-49596
MCP Inspector proxy server lacks authentication between the Inspector client and proxy
modelcontextprotocol · inspector
Critical9.4

Most common weaknesses