{"data":{"id":"5845979a-dc30-4e7d-9dae-0ab5f0c231c9","title":"CVE-2026-87008: Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing…","summary":"Code Graph RAG versions before 0.0.589 resolve file paths lexically when checking project containment, so a symbolic link inside an analyzed repository can point to a file outside the configured root. The structural_search tool discloses that content without an approval gate, and structural_replace with dry_run=False can overwrite it, including through the MCP path, which skips the agent-loop approval control. An attacker who gets a victim to analyze such a repository can read credentials or environment files and modify files the process can write.","solution":"Fixed in 0.0.589.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-87008","publishedAt":"2026-11-05T21:18:54.370Z","cveId":"CVE-2026-87008","cweIds":["CWE-22","CWE-59"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Code Graph RAG"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Code Graph RAG symlink traversal in structural search and replace","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-11-06T06:09:43.485Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-06T06:09:49.697Z","patchAvailable":null,"disclosureDate":"2026-11-05T21:18:54.370Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}