CVE Intelligence
Analysis AI-assisted

CVE-2026-44717: MCP Calculate Server - Remote Code Execution via eval() (CWE-94)

MCP Calculate Server, a calculation service built on the MCP protocol and SymPy, uses eval() on mathematical expressions without proper input sanitization before version 0.1.1. The record classifies this as code injection leading to remote code execution, with a CNA-provided CVSS 3.1 base score of 9.8 (critical). The issue is fixed in 0.1.1, and the record does not list exploitation in the wild.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

MCP Calculate Server is a calculation service built on the MCP protocol and the SymPy library. According to the record, before version 0.1.1 it evaluates mathematical expressions with eval() without proper input sanitization, which leads to remote code execution. The record classifies the weakness as CWE-94 (Code Injection). The primary source is the GitHub Security Advisory GHSA-2mgq-7rfg-rwpj.

Impact

  • The CNA-provided CVSS 3.1 base score is 9.8 (critical), with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. This describes a network-reachable attack with low complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity and availability.
  • Successful exploitation would allow code to run on the host running the service, with the privileges of that process.

Affected products and versions

  • Product: MCP Calculate Server (mcp_calculate_server).
  • Affected: versions prior to 0.1.1, per the description.
  • Fixed: 0.1.1, per the description.
  • The structured affected and fixes fields in the record are empty, so version information comes from the description text.

Exploitation status

The CISA KEV catalog does not list this CVE. No confirmed exploitation in the wild appears in the sources consulted. The EPSS probability is 0.0086 with a percentile of 0.57416.

Remediation and mitigation

  • Upgrade MCP Calculate Server to version 0.1.1 or later.
  • Until the upgrade is applied, restrict network exposure of the service and run it with minimal privileges and isolation.
  • Review whether untrusted input can reach the eval-based code path, and treat such input as hostile.
  • Consult the maintainer advisory for further guidance.

Detection guidance

  • Inventory deployments of MCP Calculate Server and record the installed versions.
  • Monitor for unexpected child processes or outbound connections originating from the service process.
  • Review service logs for unusual or malformed expression inputs.

Limitations of the available information

The record gives only a prior-to version boundary and no detailed version range. It contains no structured CPE data, patch commit details, or documented workarounds. It does not state whether a public exploit exists. The EPSS date field is listed as 2026-10-13 and was not interpreted further.

Frequently asked questions

What is the vulnerability in CVE-2026-44717?

According to the record, MCP Calculate Server uses eval() to evaluate math expressions without proper input sanitization, which can lead to remote code execution before version 0.1.1.

How is this issue fixed?

The record states that the vulnerability is fixed in version 0.1.1. Upgrading to that version or later is the recommended remediation.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.