{"id":"CVE-2026-25905","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-25905","generatedAt":"2026-10-28T08:10:30.785Z","title":"The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to modify the JS environment.","description":"The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to modify the JS environment. This may result in an attacker hijacking the MCP server - for malicious purposes including MCP tool shadowing. Note - the \"mcp-run-python\" project is archived and unlikely to receive a fix.","published":"2026-02-09T09:16:34.000Z","lastModified":"2026-06-17T10:25:25.000Z","status":"Deferred","sourceIdentifier":"reefs@jfrog.com","cvss":{"version":"3.1","score":5.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L"},"cwe":["CWE-653"],"affected":[],"epss":{"score":0.00207,"percentile":0.10667,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://research.jfrog.com/vulnerabilities/mcp-run-python-lack-of-isolation-mcp-takeover-jfsa-2026-001653030/","source":"reefs@jfrog.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-25905","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}