PT-2026-39994 · Unknown · Code Runner Mcp Server

Eryk Winiarz · CVE-2026-5029 · Published 2026-05-12 · Updated 2026-05-12

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Code Runner MCP Server (affected versions not specified)

Description A remote code execution issue exists when the server is run with the --transport http option. This configuration exposes the '/mcp' JSON-RPC endpoint on port 3088 without authentication. An unauthenticated remote attacker can invoke the run-code MCP tool to provide arbitrary source code, which is then executed via the child process.exec() function using the specified language interpreter. This allows the attacker to execute arbitrary code with the privileges of the user running the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-5029

Affected Products

Code Runner Mcp Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-5029 · Security Note
• https://cert.pl/en/posts/2026/05/CVE-2026-5029 · Note
• https://t.me/CVEtracker/53486 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2054230488202510795 · Twitter Post