CVE-2026-87008 - Code Graph RAG Vulnerability
CVE-2026-87008 - Code Graph RAG Vulnerability
Date Published: November 5, 2026
Code Graph RAG, an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases, is affected by CVE-2026-87008. Prior to version 0.0.589, the AstGrepService in codebase_rag/tools/ast_grep_service.py enumerates files beneath project_root. It relies on should_skip_path in codebase_rag/utils/path_utils.py to classify them, but the containment check operates on unresolved lexical paths.
This flaw enables a symbolic link, planted inside an analyzed repository, to reference a file outside the configured root while still appearing in scope. The structural_search tool follows the link and discloses readable content without an approval gate. Furthermore, structural_replace with dry_run=False follows it and overwrites writable content; the MCP path invokes structural replacement without the agent-loop approval control. An attacker who causes a victim to analyze a repository containing such a link can read credentials, keys, environment files, or sibling source and can modify files accessible to the code-graph-rag process.
This issue, identified as CVE-2026-87008, is fixed in version 0.0.589. The new CVE was received on Nov. 05, 2026. The vulnerability was assigned a CVSS V3.1 of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N. Associated CWEs include CWE-22 and CWE-59.
According to SSVC details, the vulnerability has ‘exploitation’: ‘poc’, ‘automatable’: ‘no’, and ‘technicalImpact’: ‘total’.
References
To read the complete article see: Read full article