Description
A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_check. The manipulation of the argument code results in code injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-16
Score: 5.1 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in the PythonREPL.run function within the jij_mcp/python_repr.py module of the Jij‑MCP‑Server 0.1.0. By manipulating the code argument, an attacker can inject arbitrary Python code that is executed by the server. This results in remote code execution, potentially compromising confidentiality, integrity, and availability of the host running the server. The flaw stems from improper handling of user input and unsafe code evaluation, as classified by CWE‑74 and CWE‑94.

Affected Systems

The affected product is Jij‑MCP‑Server version 0.1.0 by Jij‑Inc. No other product versions or vendors are listed in the CNA data. Users running this version of the server should assume it is vulnerable until an official patch is released.

Risk and Exploitability

The CVSS score of 5.1 indicates moderate risk. EPSS information is not available, but the exploit has been made public and can be launched remotely without prior authentication. The vulnerability is not included in the CISA KEV catalog, yet its public availability suggests that opportunistic exploitation may occur. Organizations should monitor for updates from Jij‑Inc and consider temporary containment measures while awaiting a formal fix.

Generated by OpenCVE AI on August 17, 2026 at 01:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Restrict external access to the Jij‑MCP‑Server by applying network segmentation or firewall rules that block untrusted IPs.
  • Disable the PythonREPL.run functionality or replace it with a validated sandboxed implementation to prevent arbitrary code execution.
  • Apply any official update from Jij‑Inc as soon as it is released; otherwise, keep the server isolated and monitor for suspicious activity.

Generated by OpenCVE AI on August 17, 2026 at 01:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 17 Aug 2026 00:00:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_check. The manipulation of the argument code results in code injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Title Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection
First Time appeared Jij-inc
Jij-inc jij-mcp-server
Weaknesses CWE-74
CWE-94
CPEs cpe:2.3:a:jij-inc:jij-mcp-server:*:*:*:*:*:*:*:*
Vendors & Products Jij-inc
Jij-inc jij-mcp-server
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 5.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Jij-inc Jij-mcp-server
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-16T23:45:08.345Z

Reserved: 2026-08-16T07:12:53.592Z

Link: CVE-2026-19964

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-17T00:16:27.290

Modified: 2026-08-17T00:16:27.290

Link: CVE-2026-19964

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T01:30:17Z

Weaknesses
  • CWE-74

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

  • CWE-94

    Improper Control of Generation of Code ('Code Injection')