VULNRABLE / Vulnerability / GHSA-c9xm-49cp-xcr9

GHSA-c9xm-49cp-xcr9

MEDIUM LOW rmcp GHSA

Exploit verdict: No active-exploit signal

CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA

Summary

rmcp OAuth client fetches server-controlled resource_metadata URLs

What this means

GHSA-c9xm-49cp-xcr9 is a medium-severity vulnerability affecting rmcp, rated CVSS 5.5. Published October 2, 2026.

View full advisory at GHSA →