CVE-2026-108716
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
mcp-remote 0.8.0 through 0.14.3 has a cleartext transmission vulnerability in authorizeWithDeviceCode that sends client secrets and receives tokens without enforcing HTTPS endpoints. When discovered device authorization and token endpoints are non-loopback HTTP URLs, on-path network attackers can capture the client secret plus issued access and refresh tokens.
Risk Assessment
Interception of secrets and tokens by an on-path attacker can lead to unauthorized access to protected resources and user accounts, posing a serious risk to data confidentiality and integrity.
Recommendation
Update mcp-remote to a version newer than 0.14.3 and ensure all communication with endpoints uses HTTPS only. Rotate any potentially exposed secrets and tokens.
Other vulnerabilities in mcp-remote
See all- CVE-2026-51996Critical
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function.
- CVE-2026-51994Critical
mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate header.
- CVE-2026-52001High
An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper in src/lib/utils.ts.
- CVE-2026-51997High
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions.
Original NVD description (English source)
mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode that sends client secrets and receives tokens without enforcing HTTPS endpoints. When discovered device authorization and token endpoints are non-loopback http URLs, on-path network attackers can capture the client secret plus issued access and refresh tokens.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS