@grackle-ai/cli (>=0.72.3, <=0.132.1), @grackle-ai/core (>=0.75.4, <=0.132.1) +7 more potentially affected by unknown CVE via @grackle-ai/auth (>=0.72.3, <=0.132.1)

@grackle-ai/auth NPM version =0.72.3, =0.72.3, =0.75.4, =0.72.3, =0.96.3, =0.99.0, =0.97.0, =0.98.0, =0.72.3, =0.75.1, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F9FF-5X35-7GFW...

@grackle-ai/cli (>=0.72.3, <=0.132.1), @grackle-ai/core (>=0.75.4, <=0.132.1) +7 more potentially affected by unknown CVE via @grackle-ai/auth (>=0.72.3, <=0.132.1)

@grackle-ai/auth NPM version =0.72.3, =0.72.3, =0.75.4, =0.72.3, =0.96.3, =0.99.0, =0.97.0, =0.98.0, =0.72.3, =0.75.1, =0.132.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIAUTH-17817919...

GHSA-F9FF-5X35-7GFW Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)

Summary Authorization for scoped agent MCP callers is enforced inline, per tool, and is applied inconsistently — several mutating tools silently omit the ancestry/workspace check that their siblings perform. Because the MCP server authenticates all outbound gRPC with the full server API key and t...

@grackle-ai/cli (>=0.19.0, <=0.132.1), @grackle-ai/server (>=0.19.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/mcp (>=0.19.0, <=0.132.1)

@grackle-ai/mcp NPM version =0.19.0, =0.19.0, =0.19.0, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F9FF-5X35-7GFW...

@grackle-ai/cli (>=0.19.0, <=0.132.1), @grackle-ai/server (>=0.19.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/mcp (>=0.19.0, <=0.132.1)

@grackle-ai/mcp NPM version =0.19.0, =0.19.0, =0.19.0, =0.132.1 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIMCP-17817921...

@grackle-ai/cli (>=0.107.2, <=0.132.1), @grackle-ai/plugin-orchestration (>=0.97.0, <=0.132.1) +1 more potentially affected by unknown CVE via @grackle-ai/plugin-core (>=0.97.0, <=0.132.1)

@grackle-ai/plugin-core NPM version =0.97.0, =0.107.2, =0.97.0, =0.107.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-F9FF-5X35-7GFW...

@grackle-ai/cli (>=0.82.2, <=0.132.2), @grackle-ai/powerline (>=0.82.2, <=0.132.2) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.2)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.2 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIRUNTIMESDK-17817938...

GHSA-VV65-F55V-XM6G Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)

Summary The default git executor used for all worktree operations spawns git through a shell, and the untrusted task branch name flows into the command unsanitized. A caller able to reach the PowerLine SpawnSession RPC a malicious or compromised agent acting through the orchestration layer, or an...

@grackle-ai/cli (>=0.82.2, <=0.132.1), @grackle-ai/powerline (>=0.82.2, <=0.132.1) +6 more potentially affected by unknown CVE via @grackle-ai/runtime-sdk (>=0.82.2, <=0.132.1)

@grackle-ai/runtime-sdk NPM version =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.82.2, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...

@grackle-ai/cli (>=0.37.0, <=0.132.1), @grackle-ai/server (>=0.37.0, <=0.132.1) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.132.1)

@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.132.1 Source cves: unknown CVE Source advisory: OSV:GHSA-VV65-F55V-XM6G...

@grackle-ai/cli (>=0.37.0, <=0.132.2), @grackle-ai/server (>=0.37.0, <=0.132.2) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.132.2)

@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.132.2 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIPOWERLINE-17817937...

@grackle-ai/cli (>=0.0.2, <=0.70.5) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.5)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.5 Source cves: unknown CVE Source advisory: OSV:GHSA-8G29-8XWR-QMHR...

@grackle-ai/cli (>=0.0.2, <=0.70.5) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.5)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.5 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840331...

@grackle-ai/cli (>=0.0.2, <=0.70.4) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.4 Source cves: unknown CVE Source advisory: OSV:GHSA-5J35-XR4G-VWF4...

@grackle-ai/cli (>=0.0.2, <=0.70.4) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.4 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840037...

@grackle-ai/cli (>=0.0.2, <=0.70.3) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.3)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.3 Source cves: unknown CVE Source advisory: OSV:GHSA-3MJM-X6GW-2X42...

Protection Mechanism Failure

Overview @grackle-ai/server is a Grackle server orchestrator — spawns and wires core gRPC, web-server HTTP, MCP, and PowerLine Affected versions of this package are vulnerable to Protection Mechanism Failure due to missing security headers in HTTP responses. An attacker can compromise the securit...

@grackle-ai/cli (>=0.0.2, <=0.70.4) potentially affected by unknown CVE via @grackle-ai/server (>=0.0.2, <=0.70.4)

@grackle-ai/server NPM version =0.0.2, =0.0.2, =0.70.4 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAISERVER-15840038...

Missing Authentication for Critical Function

Overview @grackle-ai/powerline is a gRPC PowerLine server for Grackle AI agent integration Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the PowerLine gRPC server when when --token is not provided and GRACKLEPOWERLINETOKEN is not set. An...

@grackle-ai/cli (>=0.37.0, <=0.70.0), @grackle-ai/server (>=0.37.0, <=0.70.0) potentially affected by unknown CVE via @grackle-ai/powerline (>=0.37.0, <=0.70.0)

@grackle-ai/powerline NPM version =0.37.0, =0.37.0, =0.37.0, =0.70.0 Source cves: unknown CVE Source advisory: SNYK:JS-GRACKLEAIPOWERLINE-15871386...