PT-2026-41319 · Unknown · Mcp Calculate Server

Published 2026-05-15 · Updated 2026-05-18 · CVE-2026-44717

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MCP Calculate Server versions prior to 0.1.1

Description Insufficient input sanitization when using the eval() function to evaluate mathematical expressions allows for remote code execution.

Recommendations Update to version 0.1.1.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

CWE-1427

Related Identifiers

CVE-2026-44717

Affected Products

Mcp Calculate Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-44717 · Security Note
• https://github.com/611711Dark/mcp_calculate_server/security/advisories/GHSA-2mgq-7rfg-rwpj · Note
• https://t.me/cveNotify/163915 · Telegram Post