Threats affecting pkg:github/metatool-ai/metamcp

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.4%	CVE-2026-79538metamcp · Code Injection Critical9.8EPSS 0.4%2026-09-29CVE Database V5CVE-2026-79538 metatool-ai MetaMCP versions up to and including 2.4.22 contain a critical remote code execution vulnerability in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio. This flaw allows unauthenticated attackers to execute arbitrary code on the affected system without user interaction. EPSS 0.4%Vulnerability CWE-94	CVE Database V5	2026-09-29

Page 1 of 1