https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:19:29 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-45805 <p>Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP&#39;s mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and exposed an unauthenticated /execute endpoint that passed the code field to PluginBridge.executePluginTask(), allowing anyone on the network to execute JavaScript on the server. This issue is fixed in version 2.15.0.</p> <p>Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP&#39;s mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and exposed an unauthenticated /execute endpoint that passed the code field to PluginBridge.executePluginTask(), allowing anyone on the network to execute JavaScript on the server. This issue is fixed in version 2.15.0.</p> https://db.gcve.eu/vuln/fkie_cve-2026-45805 https://db.gcve.eu/vuln/ghsa-22qr-rp27-j9wm <p><strong>Affected:</strong> npm: @penpot/mcp</p> <p>### Summary</p> <p>The MCP module&#39;s `ReplServer` binds to all interfaces (`0.0.0.0:4403`) and exposes a `/execute` endpoint that runs arbitrary code with zero authentication. Anyone on the network can POST JavaScript and it runs on the server. The main `PenpotMcpServer` was partially fixed for a similar binding issue (#8683), but `ReplServer.ts` was missed.</p> <p>### Details</p> <p>`mcp/packages/server/src/ReplServer.ts:89`:</p> <p>```typescript this.server = this.app.listen(this.port, () =&gt; { // NO HOST ARGUMENT — Express defaults to 0.0.0.0 ```</p> <p>Compare with `PenpotMcpServer.ts:301` which correctly binds to `this.host` (default `&#34;localhost&#34;`):</p> <p>```typescript this.app.listen(this.port, this.host, async () =&gt; { ```</p> <p>The `/execute` endpoint at `ReplServer.ts:52-79`:</p> <p>```typescript this.app.post(&#34;/execute&#34;, async (req, res) =&gt; { const { code } = req.body; // No auth check. Executes code via PluginBridge.executePluginTask() const task = new ExecuteCodePluginTask({ code }); const result = await this.pluginBridge.executePluginTask(task); ```</p> <p>No auth middleware, no token check, no nothing. POST JSON with a `code` field and it runs.</p> <p>This was partially flagged in #8683 (March 2026), which noted that `PenpotMcpServer.ts` was binding to `0.0.0.0`. PR #8686 attempted a fix but was closed without merging, and it only touched `PenpotMcpServer.ts` and `vite.config.ts` — `ReplServer.ts` wasn&#39;t in the diff. On current develop, `ReplServer.ts` line 89 still calls `listen(this.port)` with no h…</p> <p><strong>Affected:</strong> npm: @penpot/mcp</p> <p>### Summary</p> <p>The MCP module&#39;s `ReplServer` binds to all interfaces (`0.0.0.0:4403`) and exposes a `/execute` endpoint that runs arbitrary code with zero authentication. Anyone on the network can POST JavaScript and it runs on the server. The main `PenpotMcpServer` was partially fixed for a similar binding issue (#8683), but `ReplServer.ts` was missed.</p> <p>### Details</p> <p>`mcp/packages/server/src/ReplServer.ts:89`:</p> <p>```typescript this.server = this.app.listen(this.port, () =&gt; { // NO HOST ARGUMENT — Express defaults to 0.0.0.0 ```</p> <p>Compare with `PenpotMcpServer.ts:301` which correctly binds to `this.host` (default `&#34;localhost&#34;`):</p> <p>```typescript this.app.listen(this.port, this.host, async () =&gt; { ```</p> <p>The `/execute` endpoint at `ReplServer.ts:52-79`:</p> <p>```typescript this.app.post(&#34;/execute&#34;, async (req, res) =&gt; { const { code } = req.body; // No auth check. Executes code via PluginBridge.executePluginTask() const task = new ExecuteCodePluginTask({ code }); const result = await this.pluginBridge.executePluginTask(task); ```</p> <p>No auth middleware, no token check, no nothing. POST JSON with a `code` field and it runs.</p> <p>This was partially flagged in #8683 (March 2026), which noted that `PenpotMcpServer.ts` was binding to `0.0.0.0`. PR #8686 attempted a fix but was closed without merging, and it only touched `PenpotMcpServer.ts` and `vite.config.ts` — `ReplServer.ts` wasn&#39;t in the diff. On current develop, `ReplServer.ts` line 89 still calls `listen(this.port)` with no h…</p> https://db.gcve.eu/vuln/ghsa-22qr-rp27-j9wm