Security Advisory
CVE-2026-86544
CVSS 8.1
HIGH
Vulnerability Description
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent calls.
Published Date
2026-09-07T23:16:54.303
Data Feed
NIST National Vulnerability Database