LSTM-Kirigaya/openmcp-client

LSTM-Kirigaya/openmcp-client

GitHubGitHub
GitHubgithub.com
kirigaya.cnkirigaya.cn
Releases15
Frequency1 week 4 days
Last Release
Stars738
All in one vscode plugin for mcp developer
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-58062↗
——

LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer. Prior to version 0.1.12, when users on a Windows platform connect to an attacker controlled MCP server, attackers could provision a malicious authorization server endpoint to silently achieve an OS command injection attack in the open() invocation, leading to client system compromise. This issue has been patched in version 0.1.12.