CVE-2026-1977: Code Injection in mcp-vegalite-server

Successful exploitation of CVE-2026-1977 enables an attacker to execute arbitrary code on the server hosting the mcp-vegalite-server component. This could lead to complete system compromise, including data exfiltration, denial of service, and further malicious activity. The ability to inject code remotely significantly expands the attack surface, potentially impacting any user or system interacting with the vulnerable server. Given the code injection nature, the blast radius could extend to other services or data accessible from the compromised server, depending on the server's configuration and permissions.

1. Reserved2026-02-05
2. Published2026-02-06
3. Modified2026-02-23
4. EPSS updated2026-03-23

Due to the rolling release nature of mcp-vegalite-server, a specific patched version is not yet available. The project recommends closely monitoring their release channels for updates. As a temporary workaround, implement strict input validation on the vegalite_specification argument to sanitize any potentially malicious code. Consider deploying a Web Application Firewall (WAF) with rules to detect and block code injection attempts targeting the eval function. Regularly review and update server configurations to minimize potential attack vectors and limit the privileges of the mcp-vegalite-server process. After applying any mitigations, verify their effectiveness by attempting to reproduce the vulnerability with a safe test payload.