PT-2025-28473 · Unknown · Node-Code-Sandbox-Mcp

Dellalibera · Published 2025-07-08 · Updated 2025-07-08 · CVE-2025-53372

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: node-code-sandbox-mcp versions prior to 1.3.0

Description: The issue is caused by the unsanitized use of input parameters within a call to child process.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges on the host machine, bypassing the sandbox protection of running code inside Docker.

Recommendations: For versions prior to 1.3.0, update to version 1.3.0 to resolve the issue. As a temporary workaround, consider restricting the use of the child process.execSync function to minimize the risk of exploitation.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2026-02007

CVE-2025-53372

GHSA-5W57-2CCQ-8W95

Affected Products

Node-Code-Sandbox-Mcp

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53372.json · Exploit
• 🔥 https://github.com/alfonsograziano/node-code-sandbox-mcp/security/advisories/GHSA-5w57-2ccq-8w95 · Exploit
• https://osv.dev/vulnerability/GHSA-5w57-2ccq-8w95 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02007 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53372 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53372 · Security Note
• https://github.com/alfonsograziano/node-code-sandbox-mcp/commit/e461a74ecb189b268daac0d972c467b49b2abdd2 · Note
• https://github.com/alfonsograziano/node-code-sandbox-mcp/commit/a5e05fab06b20f2ce68326538c0d6cdf5512e10a · Note
• https://github.com/alfonsograziano/node-code-sandbox-mcp/commit/af860e2258a81ba58f4bfff7ba17e641df0e1178 · Note
• https://github.com/alfonsograziano/node-code-sandbox-mcp · Note
• https://twitter.com/CVEnew/status/1942604142234493311 · Twitter Post