isaacwasserman mcp-vegalite-server visualize_data eval コードインジェクション

Successful exploitation of CVE-2026-1977 enables an attacker to execute arbitrary code on the server hosting the mcp-vegalite-server component. This could lead to complete system compromise, including data exfiltration, denial of service, and further malicious activity. The ability to inject code remotely significantly expands the attack surface, potentially impacting any user or system interacting with the vulnerable server. Given the code injection nature, the blast radius could extend to other services or data accessible from the compromised server, depending on the server's configuration and permissions.

Organizations utilizing mcp-vegalite-server in production environments, particularly those with exposed endpoints or lacking robust input validation, are at significant risk. Systems with older, unpatched versions of Node.js running mcp-vegalite-server are especially vulnerable. Shared hosting environments where multiple users share the same server instance could also be impacted if one user's instance is compromised.

• nodejs / server:

ps aux | grep mcp-vegalite-server

• nodejs / server:

journalctl -u mcp-vegalite-server -f | grep -i "eval"

• generic web:

curl -I http://your-server/vegalite/data | grep -i "Content-Type"

1. 2026-02-06Disclosure

   disclosure

1. 予約済み2026-02-05
2. 公開日2026-02-06
3. 更新日2026-02-23
4. EPSS 更新日2026-03-23

Due to the rolling release nature of mcp-vegalite-server, a specific patched version is not yet available. The project recommends closely monitoring their release channels for updates. As a temporary workaround, implement strict input validation on the vegalite_specification argument to sanitize any potentially malicious code. Consider deploying a Web Application Firewall (WAF) with rules to detect and block code injection attempts targeting the eval function. Regularly review and update server configurations to minimize potential attack vectors and limit the privileges of the mcp-vegalite-server process. After applying any mitigations, verify their effectiveness by attempting to reproduce the vulnerability with a safe test payload.