# MCP Inspector: update app isolation and input validation

Canonical: https://www.oktsec.com/radar/mcp-inspector-2-14-0-security-update
Publisher: Oktsec
Language: en
Published: 2026-11-07T12:52:55Z
Updated: 2026-11-07T12:52:55Z
Record reviewed: 2026-11-07T12:52:55Z
Latest evidence check: 2026-11-07T12:52:55Z
Disclosed: 2026-11-04

Inspector fixes three advisories covering MCP App isolation, imported configuration and web input validation, and tool output regex processing. Update v2 to 2.14.0; v1 needs 1.0.4 for the regex flaw.

## Evidence and response priority

- Category: Vulnerability
- Oktsec priority: Review this week
- Rationale: The advisories include reproduction cases involving untrusted connected servers or imported content. They do not establish exploitation in real attacks.
- Evidence: Attacks not established
- Verification: Vendor confirmed
- Fix status: Fix available
- Exposure requirement: Application or configuration dependent
- Vendor: Model Context Protocol
- Products: MCP Inspector

## Technical overview

The MCP App flaw lets an untrusted rendered frame navigate away while retaining its host bridge. This scenario concerns the web Apps tab, not CLI/TUI clients or apps using a dedicated origin.

A malicious server.json import can pass unexpected runtime flags while showing a benign package name. That advisory also covers URL schemes and preview content security policy in the web client. A separate regex flaw can freeze the client after the user connects to a malicious server and calls a tool; that flaw does not establish code execution.

The regex advisory was published November 4; the other two on November 5. None lists a CVE. Public reproduction cases are not evidence of active attacks.

## Recommended response

Update the installed Inspector branch and restart the client.

Relevant to: Developers and security reviewers using MCP Inspector.

## Affected systems and fixes

### Inspector v2

Affected: 2.0.0 through 2.13.0 inclusive.

Fixed release / action: 2.14.0

### Inspector v1: regex advisory only

Affected: 1.0.3 and earlier.

Fixed release / action: 1.0.4

Confirm the running version against the vendor advisory, including any distribution backports.

## Response checklist

1. **Confirm the installed branch** — Use 2.14.0 for v2 or 1.0.4 for v1. The v1 correction here concerns GHSA-2fw8-7jmw-r937 only.
2. **Review untrusted inputs** — Check imported server definitions and app trust before reconnecting. Do not rely on an older Inspector's app policy as a verified network boundary.

## Relevance to AI environments

These flaws affect the inspection tool itself when handling untrusted MCP content.

## Sources

- [Inspector MCP App isolation](https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-h9j8-vj8g-v3gg) — Model Context Protocol; Vendor notice; checked 2026-11-07T12:52:55Z
- [Inspector import and web validation](https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-rwv7-mh2c-ff2p) — Model Context Protocol; Vendor notice; checked 2026-11-07T12:52:55Z
- [Inspector tool output regex](https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-2fw8-7jmw-r937) — Model Context Protocol; Vendor notice; checked 2026-11-07T12:52:55Z

## Editorial record

- 2026-11-07T12:52:55Z: Added vendor scope, corrections and response guidance.

## Use this advisory in Radar

Use the Advisory view to understand the issue and its evidence, Affected systems to compare versions, and Response plan to record applicability, an owner and action progress. Plans are saved only in the current browser and can be downloaded for sharing; they are not a shared team account or an automated scan. Completing a plan does not validate remediation. Talk to Oktsec opens a technical consultation with the advisory and selected service preserved. Scope, fees and access are agreed before any assessment.

[Open advisory](https://www.oktsec.com/radar/mcp-inspector-2-14-0-security-update) · [Build a response plan](https://www.oktsec.com/radar/mcp-inspector-2-14-0-security-update#review-workspace)

- [Exposure check consultation](https://www.oktsec.com/contact?source=radar&intent=assessment&item=mcp-inspector-2-14-0-security-update&service=exposure_check)
- [Patch verification consultation](https://www.oktsec.com/contact?source=radar&intent=assessment&item=mcp-inspector-2-14-0-security-update&service=patch_verification)

## Scope and corrections

Radar is a selected editorial collection, not a complete vulnerability database or a scan of your environment. Priorities are Oktsec analysis. Source confirmation and checklist completion do not establish whether your systems are compromised or secure.

[Sources and methodology](https://www.oktsec.com/radar/about). Report corrections with supporting sources to info@oktsec.com. Do not send secrets or private incident data.