CVE-2026-45805

Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and exposed an unauthenticated /execute endpoint that passed the code field to PluginBridge.executePluginTask(), allowing anyone on the network to execute JavaScript on the server. This issue is fixed in version 2.15.0.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/penpot/penpot/commit/798ee46b4a84ee6dfc756b001f33acbe0280d62f
https://github.com/penpot/penpot/issues/9518
https://github.com/penpot/penpot/releases/tag/2.15.0
https://github.com/penpot/penpot/security/advisories/GHSA-22qr-rp27-j9wm
https://github.com/penpot/penpot/security/advisories/GHSA-22qr-rp27-j9wm

Configurations

No configuration.

History

15 Jul 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-07-15 16:16

Updated : 2026-07-15 18:15

NVD link : CVE-2026-45805

Mitre link : CVE-2026-45805

CVE.ORG link : CVE-2026-45805

JSON object : View

Products Affected

No product.

CWE

CWE-749

Exposed Dangerous Method or Function

{"id": "CVE-2026-45805", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45805", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-15T15:44:07.480732Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "penpot", "product": "penpot", "versions": [{"status": "affected", "version": "< 2.15.0"}]}]}], "published": "2026-07-15T16:16:45.787", "references": [{"url": "https://github.com/penpot/penpot/commit/798ee46b4a84ee6dfc756b001f33acbe0280d62f", "source": "security-advisories@github.com"}, {"url": "https://github.com/penpot/penpot/issues/9518", "source": "security-advisories@github.com"}, {"url": "https://github.com/penpot/penpot/releases/tag/2.15.0", "source": "security-advisories@github.com"}, {"url": "https://github.com/penpot/penpot/security/advisories/GHSA-22qr-rp27-j9wm", "source": "security-advisories@github.com"}, {"url": "https://github.com/penpot/penpot/security/advisories/GHSA-22qr-rp27-j9wm", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-749"}]}], "descriptions": [{"lang": "en", "value": "Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and exposed an unauthenticated /execute endpoint that passed the code field to PluginBridge.executePluginTask(), allowing anyone on the network to execute JavaScript on the server. This issue is fixed in version 2.15.0."}], "lastModified": "2026-07-15T18:15:13.373", "sourceIdentifier": "security-advisories@github.com"}