Code Runner Mcp Server
Monthly
Remote code execution in Code Runner MCP Server (all versions) allows an unauthenticated attacker with adjacent-network access to run arbitrary commands when the server is launched with the --transport http option, which exposes an unauthenticated /mcp JSON-RPC endpoint on port 3088. Invoking the run-code tool passes attacker-supplied source to child_process.exec(), yielding code execution as the user running the server. This is a design-level missing-authentication flaw (CWE-306) with no public exploit identified at time of analysis; EPSS is low (0.05%) and it is not on CISA KEV.
Remote code execution in Code Runner MCP Server (all versions) allows an unauthenticated attacker with adjacent-network access to run arbitrary commands when the server is launched with the --transport http option, which exposes an unauthenticated /mcp JSON-RPC endpoint on port 3088. Invoking the run-code tool passes attacker-supplied source to child_process.exec(), yielding code execution as the user running the server. This is a design-level missing-authentication flaw (CWE-306) with no public exploit identified at time of analysis; EPSS is low (0.05%) and it is not on CISA KEV.