GCVE-110-VULN-PYPI-2026-000809

Advisory PublishedCVSS 4.2/10

Vulnetix · Advisory published November 7, 2026

[P-PY-COMPILE-EXEC] exec(compile(...)) dynamic code execution — matched: exec(compile(code, "<mcp-strategy>", "exec"), ns, locals_)

Weaknesses (CWE)

CWE-94Improper Control of Generation of Code ('Code Injection')

CVSS 3.1

4.2/10

Medium · CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

Vendor	Product	Versions	Platforms
pypi	manifoldbt-mcp	0.2.0 (affected)	—

advisory

web

1,002 records in the GCVE database · Updated November 7, 2026

No matching records found.

Investigate this vulnerability in the interactive console or download the raw GCVE record.