Skip to content
OpenAdvisories
High · 8.7 Public exploit CVE-2026-5029 EUVD-2026-29437GHSA-jv4w-6p47-rhcx

RCE in Code Runner MCP Server

Published May 12, 2026 · Updated May 12, 2026 · Assigned by CERT-PL

Vendor: Code Runner MCP Server Product: Code Runner MCP Server

Description

A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool to supply arbitrary source code and execute it via child_process.exec() using the specified language interpreter. This allows execution of arbitrary code with the privileges of the user running the server. This vulnerability has not been fixed and might affect the project in all versions.

Affected products

VendorProductAffectedFixed
Code Runner MCP Server Code Runner MCP Server — —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References