A vulnerability, which was classified as problematic, was found in mcp-run-python. Impacted is the function
runPython/runPythonAsync of the component Pyodide API. The manipulation results in improper isolation or compartmentalization.
This vulnerability is identified as CVE-2026-25905. The attack can be executed remotely. There is not any exploit available.
