Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

modelcontextprotocol/inspector

              main @ 638f2bf
            

Fixes

CVEs

CRITICAL

Peak severity

61.5%

Coverage

Highlights

Auth Bypass: 5 prior fixes. Scrutinize any change in this area.

server/src/index.ts: most-fixed (6 issues). Treat as high-risk during review.

6 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Lack of authentication on critical proxy server endpoints (like /mcp, /stdio, and /sse) allowed unauthorized local process execution and arbitrary command execution. This exposure is tracked under CVE-2025-49596.

Auth Bypass: Using standard Authorization headers led to conflicts and credential leakage when forwarding requests upstream, requiring a transition to custom X-MCP-Proxy-Auth headers.

Cross-Site Request Forgery: A lack of origin header validation exposed the local proxy server to DNS rebinding and cross-origin attacks targeting administrative and execution endpoints.