CVE-2026-45805CWE-749

Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

High · published July 15, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and exposed an unauthenticated /execute endpoint that passed the code field to PluginBridge.executePluginTask(), allowing anyone on the network to execute JavaScript on the server. This issue is fixed in version 2.15.0.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2026-07-15T15:11Z
EPSS history
Timeline
  • 15 JUL 15:11Z
    Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE
    cvelistv5