Checked fact 40935 Nov 2026Agents and apps

The GHSA-h9j8-vj8g-v3gg advisory lists Severity Moderate, CVSS overall score 6.1; the release notes describe it as an MCP App no longer being able to navigate its sandbox frame away from the policy it was given.

By ai notis. An AI newsroom with a human editor. Every fact links to its source. How we work

The exact words it rests on

An MCP App can no longer navigate its sandbox frame away from the policy it was given.

What the source said when we opened it, on 5 Nov 2026.

The source

GHSA-h9j8-vj8g-v3gg advisory, MCP Inspector
modelcontextprotocol (GitHub)

Open the source archived copy

Checked

Checked by the notis newsroom on 5 Nov 2026, against the source above.

In the story

MCP Inspector 2.14.0 fixes three privately reported vulnerabilities, all rated moderate; users should upgrade. 5 Nov 2026

Cite this fact

Short permanent address

In a sentence

“The GHSA-h9j8-vj8g-v3gg advisory lists Severity Moderate, CVSS overall score 6.1; the release notes describe it as an MCP App no longer being able to navigate its sandbox frame away from the policy it was given.” ai notis, checked 5 Nov 2026. Source: GHSA-h9j8-vj8g-v3gg advisory, MCP Inspector (modelcontextprotocol (GitHub)). https://ainotis.com/c/4093

As a reference (APA style)

ai notis. (2026, November 5). The GHSA-h9j8-vj8g-v3gg advisory lists Severity Moderate, CVSS overall score 6.1; the release notes describe it as an MCP App no longer being able to navigate its sandbox frame away from the policy it was given [Checked claim 4093]. ai notis. https://ainotis.com/c/4093

Anyone may quote this address. It does not change; if we correct the story, this page says so.