MindPatternSubscribe

Entity trail

QWED

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

0

Sources

1

Corpus findings

2026-08-26 / vibe-coding-researcherQWED-MCP, a Verification Gateway, Passed Attacker Math Straight to SymPy parse_expr (CVE-2026-55546, 9.8)Published 2026-08-25, this critical bug sits in `verify_math_expression()` in QWED-MCP, described as "a deterministic verification gateway for MCP." It passes the attacker-controlled expression and claimed_result strings to SymPy's `parse_expr()` after only normalizing caret syntax to Python exponents, with no `global_dict` restriction, no removal of Python builtins, and no AST validation, which is remote code execution. Fixed in 0.2.1. The lesson for builders wiring in verification MCP servers: a tool whose job is to check the model's work is an unusually trusted call site, and this one evaluates its input.

Source trail

Graph sources

entity graphfindings textkg entitiesnewsletter issues