CVE-2026-5029

Critical Code Runner Model Context Protocol Server Flaw Enables Unauthenticated Remote Code Execution CVE-2026-5029

A critical CVSS 9.8 remote code execution vulnerability in Code Runner Model Context Protocol servers permits arbitrary host code execution via untrusted AI agent tool calls.