anonhaven

CVE-2026-52001

NONE EPSS 0.25%
Updated Sep 25, 2026
An
Parameter Value
Vendor An
Public PoC No

An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts

References 4

https://github.com/geelen/mcp-remote
cve@mitre.org
https://github.com/geelen/mcp-remote/security/advisories
cve@mitre.org
https://github.com/playb0t/mcp-remote-oauth-security#readme
cve@mitre.org
https://github.com/playb0t/mcp-remote-oauth-security/blob/v1.0.1/advisories/F-1…
cve@mitre.org
Share Post Share Share Share