What happened
CVE-2026-106763 (published 2026-10-23, NVD Deferred) is an arbitrary code execution issue in the sagemath-mcp-server package, triggered through the escapeShellString and sanitizeCode functions used to build shell/executable commands from agent-provided input.
Why it matters
It is an AI-relevant agentic-tool-surface RCE: a malicious or compromised prompt can escalate to code execution on the machine hosting the SageMath MCP server. Low blast radius because the package is niche and not widely deployed.
Attack vector
An LLM agent (or the remote caller driving it) supplies crafted arguments to the MCP server's math/code tools, which are passed through escapeShellString and sanitizeCode without sufficient validation, allowing arbitrary code execution on the host running the MCP server.
Affected systems
@justice8096/sagemath-mcp-server 1.0.1
Mitigation
No fixed release is documented; NVD status is Deferred. If deployed, avoid exposing the MCP server to untrusted prompts, run it with least-privilege credentials, and only connect agent hosts you fully trust.