CVE-2025-53372

node-code-sandbox-mcp is a Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript. Prior to 1.3.0, a command injection vulnerability exists in the node-code-sandbox-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child_process.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges on the host machine, bypassing the sandbox protection of running code inside docker. This vulnerability is fixed in 1.3.0.

• CWE-77

• https://github.com/alfonsograziano/node-code-sandbox-mcp/commit/e461a74ecb189b268daac0d972c467b49b2abdd2
• https://github.com/alfonsograziano/node-code-sandbox-mcp/security/advisories/GHSA-5w57-2ccq-8w95
• https://github.com/alfonsograziano/node-code-sandbox-mcp/security/advisories/GHSA-5w57-2ccq-8w95

Published

Jul 8, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53367DjVuLibre is a GPL implementation of DjVu, a web-centric for…8.4
• CVE-2025-53368Citizen is a MediaWiki skin that makes extensions part of th…5.4
• CVE-2025-53369Short Description is a MediaWiki extension that provides loc…8.6
• CVE-2025-5337The Slider, Gallery, and Carousel by MetaSlider plugin for W…5.4
• CVE-2025-53370Citizen is a MediaWiki skin that makes extensions part of th…5.4
• CVE-2025-53371DiscordNotifications is an extension for MediaWiki that send…9.1
• CVE-2025-53373Natours is a Tour Booking API. The attacker can easily take …8.9
• CVE-2025-53374Dokploy is a self-hostable Platform as a Service (PaaS) that…4.3
• CVE-2025-53375Dokploy is a self-hostable Platform as a Service (PaaS) that…6.5
• CVE-2025-53376Dokploy is a self-hostable Platform as a Service (PaaS) that…8.8
• CVE-2025-53377WeGIA is a web manager for charitable institutions. A Reflec…6.1
• CVE-2025-53378A missing authentication vulnerability in Trend Micro Worry-…9.8