Code Executor MCP Server

This code executor MCP server has critical security vulnerabilities that make it unsafe for production use. The most severe issue is a hard-coded path injection at the module level (`sys.path.insert(0, os.path.expanduser('~/clawd/meok-labs-engine/shared'))`) that loads an external auth middleware from an uncontrolled directory, creating a supply-chain attack vector. Additionally, the `execute_code_docker` tool lacks proper authentication checks, safety validation, and error handling. While the server implements regex-based safety filters for blocking dangerous patterns, these can be bypassed, and the rate-limiting mechanism uses an in-memory dict without persistence, making it ineffective. The subprocess execution patterns, though using `shell=False`, still pose risks without proper input validation. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.