PT-2026-41319 · 611711Dark · Mcp Calculate Server

Published 2026-05-15 · Updated 2026-05-15 · CVE-2026-44717

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without proper input sanitization leads to remote code execution. This vulnerability is fixed in 0.1.1.

Fix

Code Injection

Weakness Enumeration

CWE-94

CWE-1427

Related Identifiers

CVE-2026-44717

Affected Products

Mcp Calculate Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-44717 · Security Note
• https://github.com/611711Dark/mcp_calculate_server/security/advisories/GHSA-2mgq-7rfg-rwpj · Note