Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-6514 PoC — OS command injection in mcp-remote when connecting to untrusted MCP servers

Source
https://github.com/ChaseHCS/CVE-2025-6514
Associated Vulnerability
Title:OS command injection in mcp-remote when connecting to untrusted MCP servers (CVE-2025-6514)
Description:mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
Description
Documentation for CVE-2025-6514. MCP-Remote RCE.
Readme
# CVE-2025-6514
Documentation for CVE-2025-6514. MCP-Remote arb code execution.

## To-do list

1. Figure out how to setup Vast.ai 4090 instance.
2. Setup LLama or Gemma model locally on the instance. Be able to successfully query the model.
3. Setup MCP-Remote. Successfully send JSON calls to MCP 0.15.
4. Successfully achieve code execution!
File Snapshot

 [4.0K]  /data/pocs/9206781e17b8c998b9f102c0843ba40e7c03ad77
└── [ 345]  README.md

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →