@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions

Summary

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.

Remediation

1. Inventory every @justice8096/sagemath-mcp-server deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Advisoryhttps://github.com/advisories/GHSA-2vq3-mpmf-9xgr
• Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-106763
• Referencehttps://github.com/justice8096/sagemath-mcp-server/issues/1
• Referencehttps://stillosdigitalholdings.com/advisories/CVE-2026-106763.cve.json
• Referencehttps://www.npmjs.com/package/@justice8096/sagemath-mcp-server