CRITICAL VULNERABILITY IN ANTHROPIC'S MCP EXPOSES DEVELOPER MACHINES TO REMOTE EXPLOITS

Summary from the TLDR InfoSec newsletter

A critical vulnerability (CVE-2025-49596) in Anthropic's MCP Inspector tool exposed developers to remote code execution via misconfigurations and browser flaws. Attackers could exploit this by tricking users into visiting malicious websites. Fixed in version 0.14.1, the patch adds authentication and origin validation to secure localhost services against RCE attacks.