An MCP server uses mcp-remote (critical command-injection ≤ 0.1.15)
What this means
An MCP server using mcp-remote (command-injection ≤ 0.1.15).
How to fix it
Upgrade mcp-remote to ≥ 0.1.16 and pin it. A malicious MCP endpoint could otherwise inject OS commands via the OAuth metadata (CVE-2025-6514).
Check it yourself
Run a scan and look for BLWK-AI-004 in the results:
sh
bulwark scan
bulwark ai scanInstalled the standalone CLI package instead of the app? The command is bulwarkctl.
References
Related checks
- A Python startup hook runs code in every Python process ·
BLWK-PERSIST-005 - Traces of the LiteLLM 1.107.0 credential stealer were found ·
BLWK-ROOTKIT-002 - An MCP server runs an unpinned package from a registry ·
BLWK-AI-003 - An MCP server launches via a shell interpreter ·
BLWK-AI-005 - An MCP server runs a privileged or host-mounting container ·
BLWK-AI-019