CVE-2026-1977

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1977", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-02-05T13:36:38.321Z", "datePublished": "2026-02-06T03:32:06.801Z", "dateUpdated": "2026-02-23T09:20:37.927Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-23T09:20:37.927Z"}, "title": "isaacwasserman mcp-vegalite-server visualize_data eval code injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-94", "lang": "en", "description": "Code Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-74", "lang": "en", "description": "Injection"}]}], "affected": [{"vendor": "isaacwasserman", "product": "mcp-vegalite-server", "versions": [{"version": "16aefed598b8cd897b78e99b907f6e2984572c61", "status": "affected"}], "modules": ["visualize_data"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vulnerability is the function eval of the component visualize_data. Such manipulation of the argument vegalite_specification leads to code injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-02-05T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-02-05T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-02-07T14:37:47.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Lexpl0it (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.344499", "name": "VDB-344499 | isaacwasserman mcp-vegalite-server visualize_data eval code injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.344499", "name": "VDB-344499 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.743246", "name": "Submit #743246 | GitHub mcp-vegalite-server master Code Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/isaacwasserman/mcp-vegalite-server/issues/9", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/isaacwasserman/mcp-vegalite-server/", "tags": ["product"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-06T19:34:25.664093Z", "id": "CVE-2026-1977", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-06T19:34:37.592Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1977", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-06T19:34:25.664093Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-06T19:34:34.203Z"}}], "cna": {"title": "isaacwasserman mcp-vegalite-server visualize_data eval code injection", "credits": [{"lang": "en", "type": "reporter", "value": "Lexpl0it (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"vendor": "isaacwasserman", "modules": ["visualize_data"], "product": "mcp-vegalite-server", "versions": [{"status": "affected", "version": "16aefed598b8cd897b78e99b907f6e2984572c61"}]}], "timeline": [{"lang": "en", "time": "2026-02-05T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-02-05T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-02-07T14:37:47.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.344499", "name": "VDB-344499 | isaacwasserman mcp-vegalite-server visualize_data eval code injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.344499", "name": "VDB-344499 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.743246", "name": "Submit #743246 | GitHub mcp-vegalite-server master Code Injection", "tags": ["third-party-advisory"]}, {"url": "https://github.com/isaacwasserman/mcp-vegalite-server/issues/9", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/isaacwasserman/mcp-vegalite-server/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vulnerability is the function eval of the component visualize_data. Such manipulation of the argument vegalite_specification leads to code injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "Code Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "Injection"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-23T09:20:37.927Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1977", "state": "PUBLISHED", "dateUpdated": "2026-02-23T09:20:37.927Z", "dateReserved": "2026-02-05T13:36:38.321Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-02-06T03:32:06.801Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["visualize_data"], "product": "mcp-vegalite-server", "vendor": "isaacwasserman", "versions": [{"status": "affected", "version": "16aefed598b8cd897b78e99b907f6e2984572c61"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vulnerability is the function eval of the component visualize_data. Such manipulation of the argument vegalite_specification leads to code injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet."}, {"lang": "es", "value": "Se ha detectado una vulnerabilidad de seguridad en isaacwasserman mcp-vegalite-server hasta 16aefed598b8cd897b78e99b907f6e2984572c61. Afectada por esta vulnerabilidad es la funci\u00f3n eval del componente visualize_data. Tal manipulaci\u00f3n del argumento vegalite_specification conduce a la inyecci\u00f3n de c\u00f3digo. El ataque puede ser realizado desde remoto. El exploit ha sido divulgado p\u00fablicamente y puede ser utilizado. Este producto utiliza un sistema de lanzamiento continuo para entrega continua, y como tal, la informaci\u00f3n de la versi\u00f3n para las versiones afectadas o actualizadas no se divulga. El proyecto fue informado del problema tempranamente a trav\u00e9s de un informe de incidencias pero a\u00fan no ha respondido."}], "id": "CVE-2026-1977", "lastModified": "2026-06-17T10:16:49.010", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1977", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-06T19:34:25.664093Z", "version": "2.0.3"}}]}, "published": "2026-02-06T04:15:52.200", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/isaacwasserman/mcp-vegalite-server/"}, {"source": "cna@vuldb.com", "url": "https://github.com/isaacwasserman/mcp-vegalite-server/issues/9"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.344499"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.344499"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.743246"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}, {"lang": "en", "value": "CWE-94"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-17T22:56:15.710061+00:00", "value": {"mitigation_remediation": ["Apply any available fix or update to the latest commit of mcp-vegalite-server that resolves the eval injection.", "Restrict external access to the visualize_data endpoint, allowing only trusted users or internal networks.", "If patching or restricting access is not possible, modify the source to replace the eval function with safer parsing logic or enforce strict validation of the vegalite_specification input.", "Continuously monitor application logs for abnormal requests to the visualize_data endpoint and investigate suspicious payloads promptly."], "summary": {"action": "Assess Impact", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The vulnerability affects all releases of isaacwasserman\u2019s mcp-vegalite-server up to commit 16aefed598b8cd897b78e99b907f6e2984572c61. Because the project follows a rolling-release model, no specific version numbers are formally released, and no patched revision is publicly identified at this time. Therefore, any instance of the application running the affected code base is potentially vulnerable.", "description_and_impact": "An eval code injection vulnerability exists in the visualize_data component of mcp-vegalite-server. The function eval processes the vegalite_specification parameter without proper validation, enabling a remote attacker to supply arbitrary JavaScript that is executed on the server. This flaw aligns with CWE-74 (Command Injection) and CWE-94 (Improper Control of Code Generation). Successful exploitation permits the attacker to run code with the server\u2019s permissions, compromising confidentiality, integrity, and availability of the host system.", "risk_and_exploitability": "The CVSS score of 5.3 indicates moderate severity, but the vulnerability\u2019s remote code execution potential makes it a significant security concern. The EPSS score of less than 1% suggests that exploitation is currently unlikely or not widely reported; however, the publicly disclosed exploit and lack of an official fix mean that an attacker could still target vulnerable deployments. The issue is not listed in CISA\u2019s KEV catalog, but administrators should still assess whether the application is exposed to untrusted networks and consider immediate remediation."}}}}, "created": "2026-02-06T12:04:56.421700+00:00", "updated": "2026-04-17T23:00:12.644168+00:00", "vendors": ["isaacwasserman", "isaacwasserman$PRODUCT$mcp-vegalite-server"]}