Skip to content
Vulnerability intelligence

CVE-2025-6514: mcp-remote vulnerability

Pillar Security says a malicious MCP server could run code on developer PCs. The fix shipped as a refactor.

2025
What WebPulse reported · 1 analysis
OpenCode sign-in flaw let a rogue server run code on Windows, with no CVE

Pillar Security says a malicious MCP server could run code on developer PCs. The fix shipped as a refactor.

October 22, 2026
View CVE-2025-6514 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2025-3248 CVE-2025-8671 CVE-2025-8088 CVE-2025-68788 CVE-2025-67644 CVE-2025-66208 CVE-2025-66035 CVE-2025-66032