Critical severity9.8NVD Advisory· Published May 15, 2026· Updated May 18, 2026

CVE-2026-44717

Description

MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without proper input sanitization leads to remote code execution. This vulnerability is fixed in 0.1.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MCP Calculate Server/MCP Calculate Serverllm-create
Range: <0.1.1

Patches

Vulnerability mechanics

References

github.com/611711Dark/mcp_calculate_server/security/advisories/GHSA-2mgq-7rfg-rwpjnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000