The vulnerability in geelen/mcp-remote allows a remote attacker to execute arbitrary code by exploiting the open() function. The flaw resides in the handling of user‑supplied data that is passed to open(), enabling the attacker to inject malicious commands or load arbitrary files. Because the function can be triggered over the network, execution of arbitrary code results in a full compromise of the affected host.

Affected versions include geelen/mcp-remote 0.1.16 through 0.1.38. No other vendors or product lines were identified. The path taken to exploit the issue requires an attacker to supply a crafted URL or request that invokes the open() call in one of the vulnerable releases.

The CVE is not listed in the CISA KEV inventory and has a reported CVSS score of 8.8. The EPSS score is less than 1%, indicating a very low but nonzero exploitation probability. The nature of the flaw—remote code execution—still implies a high severity potential. An attacker could use an externally crafted request to trigger the vulnerable open() function, leading to code execution with the privileges of the running process. Immediate attention is warranted, especially in untrusted deployment environments.