Skip to content
OpenAdvisories

Product · wong2

mcp-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2025-9262

    wong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection

    A flaw has been found in wong2 mcp-cli 1.13.0. Affected is the function redirectToAuthorization of the file /src/oauth/provider.js of the component oAuth Handler. This manipulation causes os command injection. The attack may be initiated remotely. The attack …

    wong2 mcp-cli @wong2/mcp-cli npm