Description
Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. From 0.0.9 to 1.17.0, the get_diagnostics MCP tool loads and executes all DiagnosticAnalyzer assemblies referenced by the target solution without any allowlist, signature check, or user confirmation; includeAnalyzers defaults to true, so no explicit opt-in is required. An attacker who can place a malicious .csproj referencing an attacker-controlled DLL in a location the victim opens with the MCP server will achieve arbitrary code execution in the server process with the server-s OS privileges. This vulnerability is fixed in 1.17.0.
CVSS 7.8EPSS 0.14300000000000002%Risque 0.79
Voir la source- Publication
- 2026-05-29 14:16:30
- Versions concernées
- <1.17.0
- Type
- Core software
- Dernière modification
- 2026-07-21 12:10:00
- Vecteur
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H