CVE-2025-4143

score

<0.1

cvss

6.1

epss

0.3%

published

2025-05-01

kev added

—

first seen

2026-10-21

Cloudflare workers-oauth-provider in MCP framework contains a redirect_uri validation flaw caused by not verifying the redirect URI against the allowed list during authorization, letting attackers potentially hijack user credentials, exploit requires tricking a victim into visiting a malicious site after prior authorization.