High severity7.5NVD Advisory· Published Sep 24, 2026· Updated Oct 6, 2026

CVE-2026-52001

Description

An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Geelen/Mcp Remotellm-fuzzy
Range: 0.1.18 - 0.1.38

Patches

Vulnerability mechanics

References

github.com/geelen/mcp-remote/security/advisoriesnvd
github.com/playb0t/mcp-remote-oauth-security/blob/v1.0.1/advisories/F-11-sse-token-origin-scope.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000