CVE-2025-9262
1 advisory.
npm/@wong2/mcp-cli CVE-2025-9262: medium 5.6, EPSS 4.26%
wong2 mcp-cli Command Injection Vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.13.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-p6rm-483j-37jf
- https://nvd.nist.gov/vuln/detail/CVE-2025-9262
- https://github.com/wong2/mcp-cli/pull/16
- https://github.com/wong2/mcp-cli/commit/35629664cc5d3aea4c3d083d075fe26e7c346b59
- https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e
- https://gist.github.com/superboy-zjc/a01bd059c4078249d899f8c70c8feb0e#proof-of-concept
- https://github.com/wong2/mcp-cli
- https://vuldb.com/?ctiid.320804
- https://vuldb.com/?id.320804
- https://vuldb.com/?submit.631697
CVE-2025-9262 · published · modified · JSON