Description
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.
Published: 2026-10-23
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability resides in the @justice8096/sagemath-mcp-server package version 1.0.1. Exploitation of the escapeShellString and sanitizeCode functions allows an attacker to inject and execute arbitrary code on the host system. This type of weakness falls under improper code generation and results in a full compromise of confidentiality, integrity, and availability for the affected system.

Affected Systems

The affected product is @justice8096/sagemath-mcp-server, version 1.0.1, used within SageMath deployments. No additional vendor or product details are available.

Risk and Exploitability

With a CVSS score of 7.5 the vulnerability is classified as high risk. The EPSS score is not published, and the issue is not listed in CISA's KEV catalog, indicating no known widespread exploitation at this time. The description explicitly states that the code execution can be performed by a remote attacker, suggesting that the attack vector is network‑borne and does not require local access.

Generated by OpenCVE AI on October 23, 2026 at 18:32 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade @justice8096/sagemath-mcp-server to a patched version if available; if an upgrade is not possible, remove the package from the deployment.
  • Restrict network access to the SageMath server so that only trusted internal hosts can invoke the vulnerable functionalities.
  • Implement input validation checks that reject shell metacharacters before they are passed to escapeShellString and sanitizeCode.

Generated by OpenCVE AI on October 23, 2026 at 18:32 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-2vq3-mpmf-9xgr @justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
History

Fri, 30 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 23 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Shell Injection in @justice8096/sagemath-mcp-server
Weaknesses CWE-78
CWE-94

Fri, 23 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
Description An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-11-02T14:05:19.944Z

Reserved: 2026-10-07T00:00:00.000Z

Link: CVE-2026-106763

cve-icon Vulnrichment

Updated: 2026-10-30T16:27:03.430Z

cve-icon NVD

Status : Deferred

Published: 2026-10-23T15:17:23.063

Modified: 2026-10-30T20:16:54.600

Link: CVE-2026-106763

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T18:45:11Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')