MCP Inspector's OAuth flow could run PowerShell on Windows: inside CVE-2026-119025, and why npm update misses the fix
The MCP Inspector is the official debugging tool for the Model Context Protocol, and it is the tool AWS, Cloudflare and Azure docs point at when you need to test a remote MCP server before trusting it. On November 5, Pillar Security published the uncomfortable punchline: on Windows and WSL, the Ins…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-07 13:14 · DEV Community — AI
MCP Inspector's OAuth flow could run PowerShell on Windows: inside CVE-2026-119025, and why npm update misses the fix