JFrog Security Research Team Discovers Critical Remote Code Execution Vulnerability Hijacking mcp-remote Clients
Today, the JFrog Security Research team announced its discovery of a critical vulnerability in an mcp-remote server capable of performing remote code execution. The vulnerability, CVE-2025-6514 (CVSS 9.6 score), is capable of triggering arbitrary OS command execution when Model Context Protocol (MCP) clients, such as Claude Desktop, connect to an untrusted MCP server through mcp-remote. A successful attack results in the most severe consequence for the victim: complete system compromise.
