CVE-2026-51994

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate header

Published 2026-09-24. Last modified 2026-09-25.