@modelcontextprotocol inspector

• CVE-2026-119025 High 7.5 open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows 1.4%
• CVE-2025-58444 High 8.6 MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server 0.7%
• CVE-2025-49596 Critical 9.4 MCP Inspector proxy server lacks authentication between the Inspector client and proxy 44.5%