CVE-2026-45555Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. From 0.0.9 to 1.17.0, the get_diagnostics MCP tool loads and executes all DiagnosticAnalyzer assemblies referenced by the target solution without any allowlist, signature check, or user confirmation; includeAnalyzers defaults to true, so no explicit opt-in is required. An attacker who can place a malicious .csproj referencing an attacker-controlled DLL in a location the victim opens with the MCP server will achieve arbitrary code execution in the server process with the server's OS privileges. This vulnerability is fixed in 1.17.0.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Full discourse1 post

drMurlly 🌐 🚀 💎@drMurlly137d
Disclosure
3/7 67 CVEs have been filed against MCP implementations in 2026 alone. The latest — CVE-2026-45555 — is a remote code execution flaw in Roslyn CodeLens MCP Server. RCE on an AI tool server hits different when that server has read access to your codebase.
Post summary
A new remote code execution vulnerability, CVE-2026-45555, has been disclosed in Roslyn CodeLens MCP Server, adding to a total of 67 CVEs reported against MCP implementations in 2026.
11011218
768 followersView on X

Explore more

Back to dashboard