CVE-2026-19964
Received Received - Intake

Code Injection in Jij-Inc Jij-MCP-Server

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: VulDB

Description
A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_check. The manipulation of the argument code results in code injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-19964
EUVD
EUVD-2026-60009

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jij-inc jij-mcp-server 0.1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a code injection flaw in Jij-Inc Jij-MCP-Server 0.1.0. It occurs in the PythonREPL.run function of jij_mcp/python_repr.py. The issue allows attackers to inject and execute arbitrary Python code via the code argument in the jm_check component. The server directly executes user-controlled input using Python's exec() function without sandboxing or restrictions.

Detection Guidance

Check if the Jij-MCP-Server is running and exposed to the network. Look for unusual process activity or network connections from the server process. Inspect logs for suspicious jm_check tool calls with code parameters containing exec or system-like functions.

Impact Analysis

An attacker could exploit this to run arbitrary commands on the server hosting the MCP server. This includes executing system commands, accessing sensitive data, or installing malware. The attack requires only a single crafted tool call, making it easy to execute remotely.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. It may result in data breaches, non-compliance penalties, and loss of trust due to insufficient input validation and execution controls.

Mitigation Strategies

Disable or remove the jm_check tool if not needed. Apply input validation to sanitize the code parameter before passing it to PythonREPL.run(). Restrict network access to the MCP server to trusted clients only. Consider using sandboxing or subprocess isolation for code execution.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19964. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart