CVE-2026-19964 | Jij-Inc Jij-MCP-Server 0.1.0 jm_check jij_mcp/python_repr.py PythonREPL.run code code injection

A vulnerability categorized as problematic has been discovered in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_check. The manipulation of the argument code results in code injection.

This vulnerability is known as CVE-2026-19964. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.