8.6Alta
Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests
olo-dot-io Uni-CLI
Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin heade…