github Python analyzed be9a863

sandraschi/copy-fail-mcp

Name: sandraschi/copy-fail-mcp
Author: sandraschi

CVE-2026-31431 Copy Fail — Linux kernel LPE tester via MCP

maintainer: sandraschi
licence: MIT
first seen: 2026-08-03
last seen: 2026-09-06
releases · 30d: 0
short id

sandraschi/copy-fail-mcp is an MCP server distributed on github, maintained by sandraschi, tracked here since August 2026. It has shipped 0 releases and exposes 8 tools. Tools include cf_apply_mitigation, cf_assess, cf_check_target, cf_detect_local_wsl, cf_exploit_local, cf_get_exploit_script, and 2 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 8 tools appear to reach filesystem and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools 8