HIGH 7.5 NVD
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.
References
- https://github.com/justice8096/sagemath-mcp-server/issues/1
- https://stillosdigitalholdings.com/advisories/CVE-2026-106763.cve.json
- https://www.npmjs.com/package/@justice8096/sagemath-mcp-server
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-10-23 via NVD.
vulnfeed aggregates 15176 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.