PT-2026-7090 · Mcp · Mcp

Published 2026-02-09 · Updated 2026-04-25 · CVE-2026-25905

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions MCP (affected versions not specified)

Description The Python code executed by the 'runPython' or 'runPythonAsync' functions lacks isolation from other JavaScript code. This allows Python code to utilize Pyodide APIs to alter the JavaScript environment. An attacker could potentially hijack the MCP server, including performing MCP tool shadowing, for malicious purposes. The 'mcp-run-python' project is archived and unlikely to receive a fix.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-653

Related Identifiers

CVE-2026-25905

GHSA-PFV4-WMPH-5GC6

Affected Products

Mcp

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-25905 · Security Note
• https://osv.dev/vulnerability/GHSA-pfv4-wmph-5gc6 · Vendor Advisory
• https://github.com/pydantic/mcp-run-python · Note
• https://research.jfrog.com/vulnerabilities/mcp-run-python-lack-of-isolation-mcp-takeover-jfsa-2026-001653030 · Note
• https://twitter.com/CVEnew/status/2020796007483945120 · Twitter Post
• https://twitter.com/ai_security_10x/status/2048112666766626982 · Twitter Post
• https://t.me/cveNotify/151381 · Telegram Post
• https://t.me/CVEtracker/44195 · Telegram Post
• https://twitter.com/guava_asi/status/2028966602591670702 · Twitter Post