Skip to content

MCP Connect has unauthenticated remote OS command execution via /bridge endpoint

Critical severity GitHub Reviewed Published Mar 18, 2026 in EvalsOne/MCP-connect • Updated Mar 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts