Lucene search
+L

2 matches found

PyPA
PyPA
added 2026/07/13 2:36 p.m.24 views

MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability

ImpactCritical Sandbox Escape & Server Takeover:A critical security vulnerability exists in mcp-run-python due to a lack of isolation between the Python runtime Pyodide and the host JavaScript environment.The runPython and runPythonAsync functions execute Python code using Pyodide without...

5.8CVSS6.4AI score0.00184EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/02/09 9:30 a.m.14 views

GHSA-PFV4-WMPH-5GC6 MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability

Impact Critical Sandbox Escape & Server Takeover: A critical security vulnerability exists in mcp-run-python due to a lack of isolation between the Python runtime Pyodide and the host JavaScript environment. The runPython and runPythonAsync functions execute Python code using Pyodide without...

5.8CVSS6.3AI score0.00184EPSS
SaveExploits0References3
Rows per page
Query Builder