Skip to content
OpenAdvisories

Vendor

Code Runner MCP Server

1 known vulnerabilities.

Products

Code Runner MCP Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-5029 Public exploit

    RCE in Code Runner MCP Server

    A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool…

    Code Runner MCP Server Code Runner MCP Server