CVE-2026-5029-Exploit

🔥 CVE-2026-5029 — Code Runner MCP 서버 RCE run-code MCP 도구를 통한 인증 없는 원격 코드 실행 CVE-2026-5029에 대한 개념 증명PoC 익스플로잇 — 서버가--transport http로 실행될 때 run-code MCP 도구를 통해 트리거되는 Code Runner MCP Server의 치명적인 인증 없는 원격 코드 실행RCE 취약점입니다. 📋 취약점 개요 속성| 세부 정보 ---|--- CVE ID| CVE-2026-5029 CVSS 점수| 8.7 / 10 — 높음 CWE|...

CVE-2026-5029

A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool to supply arbitrary source code and...

CVE-2026-5029 RCE in Code Runner MCP Server

A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool to supply arbitrary source code and...