CVE-2026-5029-Exploit

kitploit · 2026-08-25

Exploit Code

MARKDOWN8 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-0X00PHANTOM-HAT-CVE-2026-5029-EXPLOIT
# 🔥 CVE-2026-5029 — Code Runner MCP 서버 RCE

### `run-code` MCP 도구를 통한 인증 없는 원격 코드 실행

![CVE](https://img.shields.io/badge/CVE--2026--5029-red?style=for-the-badge) ![CVSS](https://img.shields.io/badge/CVSS-8.7%20High-darkred?style=for-the-badge) ![Python](https://img.shields.io/badge/Python-3.8+-blue?style=for-the-badge&logo=python&logoColor=white) ![Status](https://img.shields.io/badge/Patch_Status-Not_Fixed-red?style=for-the-badge) ![License](https://img.shields.io/badge/License-Educational-yellow?style=for-the-badge)

> **CVE-2026-5029에 대한 개념 증명(PoC) 익스플로잇 — 서버가`--transport http`로 실행될 때  MCP 도구를 통해 트리거되는 Code Runner MCP Server의 치명적인 인증 없는 원격 코드 실행(RCE) 취약점입니다.**

Exploit Code

Share

Share on social media: