事件经过
CVE-2026-106763 (published 2026-10-23, NVD Deferred) is an arbitrary code execution issue in the sagemath-mcp-server package, triggered through the escapeShellString and sanitizeCode functions used to build shell/executable commands from agent-provided input.
影响分析
It is an AI-relevant agentic-tool-surface RCE: a malicious or compromised prompt can escalate to code execution on the machine hosting the SageMath MCP server. Low blast radius because the package is niche and not widely deployed.
攻击途径
An LLM agent (or the remote caller driving it) supplies crafted arguments to the MCP server's math/code tools, which are passed through escapeShellString and sanitizeCode without sufficient validation, allowing arbitrary code execution on the host running the MCP server.
受影响系统
@justice8096/sagemath-mcp-server 1.0.1
缓解措施
No fixed release is documented; NVD status is Deferred. If deployed, avoid exposing the MCP server to untrusted prompts, run it with least-privilege credentials, and only connect agent hosts you fully trust.