[CRITICAL] MCP Inspector Unauthenticated RCE (CVE-2025-49596)

CVSS 9.4 — missing authentication on the MCP Inspector proxy server lets an unauthenticated attacker trigger arbitrary code execution on the developer's machine. Chaining with a browser-level CSRF or open redirect lowers the bar to a single malicious link.