MCP Connect has unauthenticated remote OS command execution via /bridge endpoint
Critical severity
GitHub Reviewed
Published
Mar 18, 2026
in
EvalsOne/MCP-connect
•
Updated Mar 19, 2026
Give feedback on Dependabot alerts