CVE-2025-58062CWE-78

LSTM-Kirigaya's openmcp-client Vulnerable to RCE in MCP Authorization Flow

High · published August 28, 2025

CVSS v4.0
7.3
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer. Prior to version 0.1.12, when users on a Windows platform connect to an attacker controlled MCP server, attackers could provision a malicious authorization server endpoint to silently achieve an OS command injection attack in the open() invocation, leading to client system compromise. This issue has been patched in version 0.1.12.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01217 · 68.4th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-08-28T22:14Z
EPSS history
Timeline
  • 28 AUG 22:14Z
    LSTM-Kirigaya's openmcp-client Vulnerable to RCE in MCP Authorization Flow
    cvelistv5