Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-51996: geelen mcp-remote can run attacker code remotely
CVE-2026-51996 · published 25 days ago
Summary
Versions 0.1.16 through 0.1.38 of the geelen mcp-remote tool let an unauthenticated attacker execute their own code on the server by exploiting a function in the utils library. This could let an attacker take control of the affected system. Upgrade to a version newer than 0.1.38 or apply the vendor's recommended patch as soon as possible.
Original advisory text
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function
References
- https://github.com/geelen/mcp-remote
- https://github.com/geelen/mcp-remote/security/advisories
- https://github.com/playb0t/mcp-remote-oauth-security/blob/v1.0.1/advisories/F-04...
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/51xxx/CVE-2026-51996... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-51996 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.8
Critical
Type
CWE-94Code Injection
CWE-328Use of Weak Hash
Timeline
Published24 Sep 2026
Updated19 Oct 2026
First seen24 Sep 2026
Track software like this
Free during beta