ctrlINT What the industry said about every indicator, with the quote

CVE-2025-6514Vulnerability

Reported by 2 independent sources · first reported by Elastic Security Labs · last reported

Last reported 2 days ago

What the reports say

2 reports, newest first · the exact sentence from each

  1. “It was assigned CVE-2025-6514.”

    The Hacker NewsNews
    OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL

  2. “CVE-2025-6514 (mcp-remote): a command injection flaw allowed a malicious MCP server to execute arbitrary code on connected clients, resulting in full system compromise.”

    Elastic Security LabsVendor
    MCP Tools: Attack Vectors and Defense Recommendations for Autonomous Agents

Indicators reported together

named in the same reports
Copy these 2 indicators · defanged

Also named with it: CVE-2025-49596

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-6514 here?
No account needed. We do not store your IP address.