erroneo.us
Search all guides⌘K

Digest · Friday

Security digest: June 13, 2025

1 editorial brief and 3 critical advisories.

All digests · RSS · Markdown

Take stock

  • Check exposure: MCP Inspector: Unauthenticated RCE via Browser CSRF. MCP server developers who run MCP Inspector from an old lockfile, a global install, or a container below 0.14.1, or who run any version with DANGEROUSLY_OMIT_AUTH or HOST=0.0.0.0.
  • RubyGems: 1 critical advisory (openc3-cosmos-tool-iframe). Check with bundle audit check --update.
  • PyPI: 1 critical advisory (salt). Check with pip-audit (or: pip show <package>).
  • npm: 1 critical advisory (@modelcontextprotocol/inspector). Check with npm audit (or: npm ls <package>).
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Check exposure

· Vulnerability · CVE-2025-49596

MCP Inspector: Unauthenticated RCE via Browser CSRF

Fixed since June 2025, but Inspector sits in project devDependencies and npx caches, so old copies survive; confirm 0.14.1+ and never run it with auth disabled.

Must act: MCP server developers who run MCP Inspector from an old lockfile, a global install, or a container below 0.14.1, or who run any version with DANGEROUSLY_OMIT_AUTH or HOST=0.0.0.0.

Can relax: People who never run MCP Inspector, and those on 0.14.1 or later with the default session token and localhost binding.

  1. Check versions: `npm ls -g @modelcontextprotocol/inspector` and `npm ls @modelcontextprotocol/inspector` in each MCP server project.
  2. Upgrade: `npm install -g "@modelcontextprotocol/inspector@^0.14.1"` (or later), and bump devDependencies and lockfiles.
  3. Run it via `npx @modelcontextprotocol/inspector@latest` rather than relying on a cached copy.

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 3

GitHub-reviewed advisories rated critical, published this day (Pacific time).

npm 1

Check: npm audit (or: npm ls <package>)

PyPI 1

Check: pip-audit (or: pip show <package>)

RubyGems 1

Check: bundle audit check --update