CVE-2026-45805
Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and exposed an unauthenticated /execute endpoint that passed the code field to PluginBridge.executePluginTask(), allowing anyone on the network to execute JavaScript on the server. This issue is fixed in version 2.15.0.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.38%
- CWE
- CWE-749
- Published
- 2026-07-15
- Last modified
- 2026-07-15
Affected products
- penpot penpot
Weakness type
Related vulnerabilities
- CVE-2026-20293 — Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
- CVE-2026-86711 — electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge
- CVE-2026-75810 — Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief...
- CVE-2026-18263 — Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
- CVE-2026-18262 — Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
- CVE-2026-13121 — Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
- CVE-2026-52877 — Streambert : Insecure Protocol Execution in open-external IPC Handler
- CVE-2026-66781 — Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication