TI-2026-40091 CVE-2026-55546 · GHSA-mw6r-2hvm-4rp2
QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input
Priority HIGH 82
QWED-MCP is a deterministic verification gateway for MCP.
QWED-AI
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
QWED-AI records in CISA KEVNo QWED-AI vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2026-40124 CVE-2026-55585 · GHSA-q27q-98j4-9pfv
QWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
Priority HIGH 73
QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, schemas, and agent state before production execution.