High severity7.5NVD Advisory· Published Sep 24, 2026

CVE-2026-51995

Description

An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components

Affected products

Geelen/Mcp Remotellm-fuzzy
Range: 0.1.32 - 0.1.38

Patches

Vulnerability mechanics

References

github.com/geelen/mcp-remote/security/advisoriesnvd
github.com/playb0t/mcp-remote-oauth-security/blob/v1.0.1/advisories/F-02-authorization-server-ssrf.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000