---
title: "Security digest: June 13, 2025"
url: https://erroneo.us/security/2025-06-13/
description: "June 13, 2025 vulnerability digest: 1 brief (MCP Inspector: Unauthenticated RCE via Browser…); 3 critical advisories (RubyGems, PyPI, npm). What to patch…"
type: security-digest-day
section: "Security Digest"
date_published: 2025-06-13
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: June 13, 2025

1 editorial brief and 3 critical advisories.

## Take stock

- Check exposure: MCP Inspector: Unauthenticated RCE via Browser CSRF . MCP server developers who run MCP Inspector from an old lockfile, a global install, or a container below 0.14.1, or who run any version with DANGEROUSLY_OMIT_AUTH or HOST=0.0.0.0.
- RubyGems: 1 critical advisory ( openc3-cosmos-tool-iframe ). Check with bundle audit check --update .
- PyPI: 1 critical advisory ( salt ). Check with pip-audit (or: pip show <package>) .
- npm: 1 critical advisory ( @modelcontextprotocol/inspector ). Check with npm audit (or: npm ls <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [MCP Inspector: Unauthenticated RCE via Browser CSRF](https://erroneo.us/security/briefs/mcp-inspector-unauthenticated-rce/index.md): Fixed since June 2025, but Inspector sits in project devDependencies and npx caches, so old copies survive; confirm 0.14.1+ and never run it with auth disabled.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2025-28384](https://erroneo.us/security/cve/CVE-2025-28384/index.md) OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint — RubyGems openc3-cosmos-tool-iframe = 6.0.0 → no fix
- [CVE-2024-38824](https://erroneo.us/security/cve/CVE-2024-38824/index.md) Salt vulnerable to directory traversal attack in file receiving method — PyPI salt >= 3007.0rc1, < 3007.4 → 3007.4; PyPI salt >= 3006.0rc1, < 3006.12 → 3006.12
- [CVE-2025-49596](https://erroneo.us/security/cve/CVE-2025-49596/index.md) MCP Inspector proxy server lacks authentication between the Inspector client and proxy — npm @modelcontextprotocol/inspector < 0.14.1 → 0.14.1

---
Source page: https://erroneo.us/security/2025-06-13/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt