@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions

GHSA ID

GHSA-2vq3-mpmf-9xgr

CVE ID

CVE-2026-106763

Severity

high

Published

2026-10-23T15:31:39Z

Updated

2026-10-29T20:57:53Z

CVSS

7.5 · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3

7.5 · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-106763 ↗
• https://github.com/justice8096/sagemath-mcp-server/issues/1 ↗
• https://stillosdigitalholdings.com/advisories/CVE-2026-106763.cve.json ↗
• https://www.npmjs.com/package/@justice8096/sagemath-mcp-server ↗
• https://github.com/advisories/GHSA-2vq3-mpmf-9xgr ↗