Vulnerability · Published Jul 8, 2025 · Assigned by GitHub_M
CVE-2025-53372node-code-sandbox-mcp has a Sandbox Escape via Command Injection
High 7.5
In plain English
A high-severity command injection in node-code-sandbox-mcp from alfonsograziano. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
node-code-sandbox-mcp is a Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript. Prior to 1.3.0, a command injection vulnerability exists in the node-code-sandbox-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child_process.execSync, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges on the host machine, bypassing the sandbox protection of running code inside docker. This vulnerability is fixed in 1.3.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | node-code-sandbox-mcp | 1.3.0 | GHSA-5w57-2ccq-8w95 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| alfonsograziano | node-code-sandbox-mcp | < 1.3.0 |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H