{"id":"EUVD-2026-109096","enisaUuid":"ccf9d880-a359-3560-bbc1-3f805d02e64a","description":"An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.","datePublished":"Oct 23, 2026, 12:00:00 AM","dateUpdated":"Oct 30, 2026, 8:11:43 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R","references":"https://github.com/justice8096/sagemath-mcp-server/issues/1\nhttps://www.npmjs.com/package/@justice8096/sagemath-mcp-server\nhttps://stillosdigitalholdings.com/advisories/CVE-2026-106763.cve.json\n","aliases":"CVE-2026-106763\nGHSA-2vq3-mpmf-9xgr\n","assigner":"mitre","epss":0.5,"enisaIdProduct":[{"id":"981cf16c-b17e-3aa7-879f-066167586d89","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"8389773b-8d03-3115-b142-efa778463f63","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"6a6f6cd9-2d25-3f85-a0e9-511710abe861","vulnerability":{"id":"CVE-2026-106763","description":"An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.","datePublished":"Oct 23, 2026, 12:00:00 AM","dateUpdated":"Oct 30, 2026, 8:11:43 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:R","references":"https://github.com/justice8096/sagemath-mcp-server/issues/1\nhttps://www.npmjs.com/package/@justice8096/sagemath-mcp-server\nhttps://stillosdigitalholdings.com/advisories/CVE-2026-106763.cve.json\n","enisa_id":"EUVD-2026-109096\n","assigner":"mitre","epss":0.5,"dataProcessed":"Nov 1, 2026, 12:00:28 AM","vulnerabilityProduct":[{"id":"fc634601-0254-330a-ad73-ded8ad9201e6","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"06dd3c04-0e0f-34bd-98e9-2b6954f07517","vendor":{"name":"n/a"}}]}},{"id":"f39ee3a5-0843-30cc-b418-97820bec8b41","vulnerability":{"id":"GHSA-2vq3-mpmf-9xgr","description":"@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions","datePublished":"Oct 23, 2026, 3:31:39 PM","dateUpdated":"Oct 29, 2026, 8:57:50 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-106763\nhttps://github.com/justice8096/sagemath-mcp-server/issues/1\nhttps://github.com/justice8096/sagemath-mcp-server\nhttps://stillosdigitalholdings.com/advisories/CVE-2026-106763.cve.json\nhttps://www.npmjs.com/package/@justice8096/sagemath-mcp-server\n","enisa_id":"EUVD-2026-109096\n","aliases":"GHSA-2vq3-mpmf-9xgr\nCVE-2026-106763\n","epss":0.0,"dataProcessed":"Oct 31, 2026, 11:01:24 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}