schedcp

The server component (MCP) allows remote creation and compilation of new eBPF schedulers from provided source code. This is a critical remote code execution vulnerability if the input source code is not thoroughly sanitized and verified in a robust sandbox environment. Compiling and loading eBPF programs grants kernel-level privileges. While eBPF programs are subject to kernel verifier safety checks, logical flaws in custom schedulers could still lead to denial-of-service or unintended resource allocation that impacts system stability or fairness. The use of `LD_PRELOAD` in certain workload scripts (`ktransformers`) presents a high risk for arbitrary code injection, although this appears to be part of a specific workload's optimization rather than the core scheduler management. Running `sudo` commands for scheduler management (as indicated in `schedcp-cli run`) is inherent to kernel-level operations but elevates the risk if the `mcp` server or its client (`schedcp-cli`) is compromised.