mims-harvard CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL mims-harvard CVE published 2026-08-27

CVE-2026-81096

CVE-2026-81096 is a critical vulnerability in ToolUniverse that allows unauthenticated remote code execution. The vulnerability exists in the python_code_executor tool, which can be exploited by escaping the sandbox and executing code as the server process. The HTTP and MCP servers bind to every interface with debugging enabled and no authentication, making it possible for any caller to reach the port and [truncated]