Code Runner MCP Server

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Code Runner MCP Server records in CISA KEV

No Code Runner MCP Server vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-04387 CVE-2026-5029 · GHSA-jv4w-6p47-rhcx

RCE in Code Runner MCP Server

LOW 39

A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00291 Published 2026-05-12 No fix listed CWE-306

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0