bazinga012 mcp_code_executor vulnerabilities

Latest bazinga012 mcp_code_executor CVEs

Newest publication first

1. CVE-2026-4199 bazinga012 mcp_code_executor index.ts installDependencies command injection

   Published 2026-03-16

   Medium·CVSS 4.8 EPSS 0.81%

   A vulnerability was identified in bazinga012 mcp_code_executor up to 0.3.0. Affected by this issue is the function installDependencies of the file src/index.ts. Such manipulation leads to command injection. The attack can only be performed from a local environment. The exploit is...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.