CVE-2026-77604

A flaw was found in Code Graph RAG. When handling paginated file read requests, the application fails to properly validate and restrict file paths against the intended root directory. An unauthenticated attacker can exploit this vulnerability using absolute file paths or directory traversal...