CVE-2026-51994

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

EUVD-2026-86017

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery SSRF via the resourcemetadata URL extracted from a remote MCP server's WWW-Authenticate header...

CVE-2026-51994

The mcp-remote software, versions 0.1.32 through 0.1.38 , is vulnerable to Server-Side Request Forgery (SSRF) . The root cause is the improper handling of the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate header . Exploitation details are not provided in the documents.

CVE-2026-58196

ToolHive (a utility for deploying Model Context Protocol (MCP) servers) is vulnerable to SSRF in its remote MCP server authentication discovery. Prior to 0.31.0 , the host-side HTTP clients in pkg/auth/discovery trust server-controlled resource_metadata URLs from the WWW-Authenticate header, foll...