CVE-2025-14542

7.5HIGH

The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining a

게시됨: 12/13/2025업데이트됨: 12/15/2025
NVD에서 보기MITRE에서 보기

설명

The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients’ trust, a malicious provider can later change the manual to exploit the client.

AI 분석AI 기반

참조