Remote MCP OAuth URLs reach Windows and WSL shells through OpenCode and MCP Inspector
Attacker-chosen authorization_endpoint hits open@10.x PowerShell subexpressions; Inspector’s OAuth callback also flips remote sessions to local stdio.
Read the piece