CVE-2026-9764

IBM Bob Shell versions 1.0.4 through 2.0.1 are vulnerable to Remote Code Execution (RCE) . The root cause is the improper control of workspace-defined MCP server execution , where insufficient validation allows MCP servers defined within an untrusted repository to execute automatically without ex...