Skip to content

Vendor

Code Runner MCP Server vulnerabilities

1 published CVE affecting Code Runner MCP Server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of Code Runner MCP Server alerts

Products

Latest Code Runner MCP Server CVEs

Newest publication first

  1. CVE-2026-5029 RCE in Code Runner MCP Server

    Published
    HighCVSS 8.7

    A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool to supply arbitrary...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.