geelen/mcp-remote 0.1.16–0.1.38 allows unauthenticated remote arbitrary code execution via code injection in src/lib/utils.ts within getServerUrlHash. An attacker can exploit the network-exposed service to run attacker-controlled code, impacting confidentiality/integrity/availability. Update to 0.1.38 or disabling external access to the service to mitigate.