[GHSA-rwv7-mh2c-ff2p] - Unvalidated server.json import args, elicitation URL scheme, preview CSP injection #2873

Advisory: https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-rwv7-mh2c-ff2p

Status (2026-10-29): fix ready, not merged

• Accepted 2026-10-28. Severity set to Moderate (reporter's CVSS 9.6 vector cleared). Priority Medium. Lines: v2 only.
• Fix: fork PR v2 #1, 4 commits. Gate green.
  • The import panel shows the resolved command, args and env names before saving.
  • An identifier, version or env name that is invalid or starts with a flag is rejected.
  • Elicitation opens only http(s) URLs.
  • The preview CSP meta is written first in the document.
• Before the release:
  1. Merge the fork. Lift required_status_checks on v2/main - DCO and restore it from a snapshot.
  2. Ship in v2.14.0.
  3. Request a CVE and credit 3099404236.
  4. Publish.
  5. Convert this card to a v2 issue.
• Open: the acceptance comment for the reporter, which explains the narrowing and the Moderate rating, is a manual post.

Reporter: 3099404236 | Reported severity: critical | Reported: 2026-10-28

Priority score (2026-10-28, provisional — code-read only, not reproduced): Severity 4, Urgency 3, +1 security, Total 8 → Medium. Lines: v2 only.