{"id":"EM-20261109-BJCD","url":"https://cyber.eventmonitor.net/incident/EM-20261109-BJCD/code-graph-rag-vulnerability-cve-2026-77604/","type":"cve","title":"Code Graph RAG Vulnerability (CVE-2026-77604)","subtitle":"CVE-2026-77604","subject":"CVE-2026-77604","status":"Developing","severity":"high","affected":[],"headline":null,"born":"2026-11-09T21:21:32.000Z","firstSignal":"2026-11-05T20:18:00.017Z","lastSignal":"2026-11-09T21:21:32.000Z","updated":"2026-11-09T22:10:41.103Z","revision":1,"life":[{"status":"Born","at":"2026-11-09T21:21:32.000Z","why":"second independent source: C26 GitHub Advisory Database"},{"status":"Developing","at":"2026-11-09T21:21:32.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-05T20:18:00.017Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-09T21:21:32.000Z","what":"Born: second source, C26 GitHub Advisory Database. Page EM-20261109-BJCD created."}],"stages":[{"name":"Disclosed","at":"2026-11-05T20:18:00.017Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-05T20:18:00.017Z","detail":"CVSS 7.5 · EPSS 0.4%"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-05T20:18:00.017Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":3,"title":"CVE-2026-77604 (CVSS 7.5)","text":"Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases. Prior to 0.0.345, the MCPToolsRegistry.read_file implementation in codebase_rag/mcp/tools.py joins attacker-controlled file_path input to project_root without resolving and verifying containment when offset or limit selects the paginated branch. An absolute path causes pathlib to discard the configured root, while relative traversal can also resolve outside it. The protected non-paginated branch uses validate_project_path, but the paginated branch bypasses…","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77604"},{"at":"2026-11-09T21:21:32.000Z","source":"C26","sourceName":"GitHub Advisory Database","role":"Database","severity":3,"title":"GHSA-vvr2-h2jp-838m / CVE-2026-77604: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read","text":"pip:code-graph-rag","url":"https://github.com/advisories/GHSA-vvr2-h2jp-838m"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-05T20:18:00.017","score":7.5,"severity":"HIGH","desc":"Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases. Prior to 0.0.345, the MCPToolsRegistry.read_file implementation in codebase_rag/mcp/tools.py joins attacker-controlled file_path input to project_root without…","product":"","seen":1793917591435},"kev":null,"epss":{"epss":0.00383,"pct":0.32576,"at":1794262241103},"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}