Code Runner MCP Server vulnerabilities
We track 1 vulnerability in Code Runner MCP Server products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Code Runner MCP Server vulnerabilities
- 8.7 High severity
Code Runner MCP Server: Missing Authentication for Critical Functionality
A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unauthenticated remote attacker can invoke the run-code MCP tool