CVE-2025-63603 — MEDIUM (6.5)

Vulnerability Description

A command injection vulnerability exists in the MCP Data Science Server's (reading-plus-ai/mcp-server-data-exploration) 0.1.6 in the safe_eval() function (src/mcp_server_ds/server.py:108). The function uses Python's exec() to execute user-supplied scripts but fails to restrict the __builtins__ dictionary in the globals parameter. When __builtins__ is not explicitly defined, Python automatically provides access to all built-in functions including __import__, exec, eval, and open. This allows an attacker to execute arbitrary Python code with full system privileges, leading to complete system compromise. The vulnerability can be exploited by submitting a malicious script to the run_script tool, requiring no authentication or special privileges.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Mcp Server For Data Exploration Project	Mcp Server For Data Exploration	0.1.6

Related Weaknesses (CWE)

CWE-77

References

https://github.com/reading-plus-ai/mcp-server-data-exploration/issues/12ExploitIssue TrackingThird Party Advisory

FAQ

What is CVE-2025-63603?

CVE-2025-63603 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A command injection vulnerability exists in the MCP Data Science Server's (reading-plus-ai/mcp-server-data-exploration) 0.1.6 in the safe_eval() function (src/mcp_server_ds/server.py:108). The functio...

How severe is CVE-2025-63603?

CVE-2025-63603 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-63603?

Check the references section above for vendor advisories and patch information. Affected products include: Mcp Server For Data Exploration Project Mcp Server For Data Exploration.