Code Graph RAG read_file tool can read files outside the project root

high severity · published 2026-11-05

An attacker who can reach the MCP read_file tool can read arbitrary files on the machine, not just project files. This can include configuration files, credentials and other secrets.

CVE: CVE-2026-77604

Source: NVD

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 813 and your operating system.