Is CVE-2026-106763 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106763?

CVE-2026-106763 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-106763

Description

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.