Vulnerability feed

Executive summary

A command execution flaw has been reported in the @justice8096/sagemath-mcp-server package, version 1.0.1, which lets a remote attacker run arbitrary code through the tool arguments the server accepts. The advisory's own text is a public issue from a researcher asking for a private disclosure channel, and it says the flaw affects local mode only, not the Docker path. The advisory does not state a severity score, a fixed version, or a vendor-issued remediation.

Technical summary

The flaw is described as command execution reachable through the escapeShellString and sanitizeCode functions, with the input supplied as a tool argument that a connected language model may read, so indirect prompt injection is possible. The advisory says the local-execution path that is auto-selected when Sage is installed locally is affected, and that every math tool exposes the issue. The Docker path is said to pass the program as an argument array and is described as unaffected. The advisory does not state a CVSS score, a fixed version, or a workaround, and it gives no exploitation-in-the-wild information. The researcher withheld technical details pending a private channel and a 90-day coordinated disclosure timeline, so the exact triggering input is not provided.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from github.com/justice8096/sagemath-mcp-server/issues/1

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

High

Privileges required

None

User interaction

Required

Scope

Unchanged

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affects

justice8096justice8096 @justice8096/sagemath-mcp-server