critical9.8
CVE-2026-79538
metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (create…
Impact
metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO branch, routers/mcp-proxy/server.ts).
Affected products
| Product | Affected versions |
|---|---|
| Metatool-Ai MetaMCP | through 2.4.22 |
Versions were read from the advisory text. No structured product data has been published for this record yet.