PT-2026-137732

Name of the Vulnerable Software and Affected Versions Code Graph RAG versions prior to 0.0.345 Description The MCPToolsRegistry.read file function in codebase rag/mcp/tools.py fails to properly resolve and verify the containment of the file path variable when the offset or limit parameters trigge...