Evidence · DiggingBeagle record
Advisory: MCP Inspector server.json import conceals executable runtime arguments from review UI
The MCP Inspector registry import view summarized a server package but concealed runtimeArguments or packageArguments that would ultimately be passed to executable package runners. GHSA-rwv7-mh2c-ff2p documents the gap between what a user reviewed and the actual argv later executed. Approval could therefore cover more dangerous options than the UI disclosed. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
The MCP Inspector registry import view summarized a server package but concealed runtimeArguments or packageArguments that would ultimately be passed to executable package runners. GHSA-rwv7-mh2c-ff2p documents the gap between what a user reviewed and the actual argv later executed. Approval could therefore cover more dangerous options than the UI disclosed. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (4)
- supportsMCP Inspector preview controls trusted fake HTML heads and unchecked URL schemes: GHSA-rwv7-mh2c-ff2p treats these as additional preview and URL trust failures. The actual consequence is browser and platform dependent; native code execution or real-world data theft was not established.
GHSA-rwv7-mh2c-ff2p; wrapHtmlWithCsp and ElicitationUrlModalBody
- supportsMCP Inspector preview controls trusted fake HTML heads and unchecked URL schemes: The MCP Inspector preview builder used a regex that could place Content-Security-Policy text inside a fake HTML head inside a comment, and a separate elicitation flow opened caller-supplied URLs without limiting their scheme.
GHSA-rwv7-mh2c-ff2p; wrapHtmlWithCsp and ElicitationUrlModalBody
- supportsMCP Inspector obscured executable server arguments during registry import review: GHSA-rwv7-mh2c-ff2p documents the gap between what a user reviewed and the actual argv later executed. Approval could therefore cover more dangerous options than the UI disclosed.
GHSA-rwv7-mh2c-ff2p; Registry manifest import and runtime arguments
- supportsMCP Inspector obscured executable server arguments during registry import review: The MCP Inspector registry import view summarized a server package but concealed runtimeArguments or packageArguments that would ultimately be passed to executable package runners.
GHSA-rwv7-mh2c-ff2p; Registry manifest import and runtime arguments