Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. From 0.0.9 to 1.17.0, the get_diagnostics MCP t…

Published:

28 mei 2026 om 22:00:00

Alert date:

29 mei 2026 om 15:02:48

Source:

nvd.nist.gov

Enterprise Applications, Supply Chain & Dependencies

A critical vulnerability in Roslyn CodeLens MCP Server versions 0.0.9 to 1.17.0 allows arbitrary code execution through malicious DiagnosticAnalyzer assemblies. The get_diagnostics tool loads and executes assemblies without validation, allowlist, or user confirmation. Attackers can exploit this by placing a malicious .csproj file referencing attacker-controlled DLLs in locations accessed by the MCP server. The vulnerability enables code execution with server OS privileges. The issue is fixed in version 1.17.0.

Technical details

Mitigation steps:

Affected products:

Roslyn CodeLens MCP Server