PT-2026-42034 · Npm+2 · @Penpot/Mcp+1

CVE-2026-45805 · Published 2026-05-19 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.15.0

Description In the MCP module, the ReplServer binds to all network interfaces (0.0.0.0:4403) and exposes an unauthenticated '/execute' endpoint. This endpoint passes the code variable to the executePluginTask() function, allowing any user on the network to execute arbitrary JavaScript code on the server. This can lead to remote code execution, enabling attackers to read sensitive files, execute system commands, or dump environment variables containing secrets and credentials.

Recommendations Update to version 2.15.0. As a temporary workaround, restrict network access to port 4403 to prevent unauthorized external access to the ReplServer.

Exploit

Fix

Weakness Enumeration

CWE-749

Related Identifiers

CVE-2026-45805

GHSA-22QR-RP27-J9WM

Affected Products

@Penpot/Mcp

Penpot

References · 10

• 🔥 https://github.com/penpot/penpot/security/advisories/GHSA-22qr-rp27-j9wm · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45805.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-45805 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45805 · Security Note
• https://osv.dev/vulnerability/GHSA-22qr-rp27-j9wm · Vendor Advisory
• https://github.com/penpot/penpot/releases/tag/2.15.0 · Note
• https://github.com/penpot/penpot/commit/798ee46b4a84ee6dfc756b001f33acbe0280d62f · Note
• https://github.com/penpot/penpot/issues/9518 · Note
• https://github.com/penpot/penpot · Note
• https://reddit.com/r/cybersecurity/comments/1tkfk0l/14_npmpypiai_supplychain_threats_today_20260522 · Reddit Post