Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A command injection vulnerability exists in the MCP Data Science Server's (reading-plus-ai/mcp-server-data-exploration) 0.1.6 in the safe_eval() function (src/mcp_server_ds/server.py:108). The function uses Python's exec() to execute user-supplied scripts but fails to restrict the __builtins__ dictionary in the globals parameter. When __builtins__ is not explicitly defined, Python automatically provides access to all built-in functions including __import__, exec, eval, and open. This allows an attacker to execute arbitrary Python code with full system privileges, leading to complete system compromise. The vulnerability can be exploited by submitting a malicious script to the run_script tool, requiring no authentication or special privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MCP Server for Data Exploration 安全漏洞
Vulnerability Description
MCP Server for Data Exploration是reading-plus-ai个人开发者的一个MCP服务器。 MCP Data Science Server 0.1.6版本存在安全漏洞，该漏洞源于safe_eval函数未限制__builtins__字典，可能导致任意代码执行。
CVSS Information
N/A
Vulnerability Type
N/A