CVE-2026-106763 justice8096 CVE debrief

Who should care

Defenders responsible for npm packages, particularly those using @justice8096/sagemath-mcp-server version 1.0.1, should assess exposure and prioritize verification and potential updates.

Why it matters

CVE-2026-106763 allows remote attackers to execute arbitrary code via the escapeShellString and sanitizeCode functions in @justice8096/sagemath-mcp-server version 1.0.1. Defenders should prioritize verifying the presence of this version in their environments and assess exposure to remote code execution.

• Remote code execution via crafted input to escapeShellString and sanitizeCode functions
• Potential for unauthorized code execution in vulnerable environments
• Need for verification of @justice8096/sagemath-mcp-server version 1.0.1 presence and exposure

Technical summary

The @justice8096/sagemath-mcp-server package version 1.0.1 is vulnerable to remote code execution via the escapeShellString and sanitizeCode functions. An attacker can exploit this vulnerability by providing crafted input to the affected functions, potentially leading to unauthorized code execution in vulnerable environments. The vulnerability exists in version 1.0.1 of the package, and defenders should prioritize verifying the presence of this version in their environments and assess exposure to remote code execution.

Defensive priority

Defenders should prioritize verifying the presence of @justice8096/sagemath-mcp-server version 1.0.1 in their environments and assess exposure to remote code execution via the escapeShellString and sanitizeCode functions.

Recommended defensive actions

• Verify the presence of @justice8096/sagemath-mcp-server version 1.0.1 in your environment
• Assess exposure to remote code execution via the escapeShellString and sanitizeCode functions
• Consider updating to a non-vulnerable version if available
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The source corpus indicates that @justice8096/sagemath-mcp-server version 1.0.1 is vulnerable to remote code execution via the escapeShellString and sanitizeCode functions. However, the corpus does not provide information on the existence of exploits or specific attacks.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.