GHSA-85GG-2GFQ-Q95M Code Graph RAG structural tools follow out-of-root symlinks

A remote/local attacker who can get a symbolic link included in a source-code repository that code-graph-rag analyzes can cause the structuralsearch and structuralreplace tools backed by AstGrepService, exposed both as MCP tools and as agentic AI tools to read and -- via structuralreplace with...

Code Graph RAG structural tools follow out-of-root symlinks

A remote/local attacker who can get a symbolic link included in a source-code repository that code-graph-rag analyzes can cause the structuralsearch and structuralreplace tools backed by AstGrepService, exposed both as MCP tools and as agentic AI tools to read and -- via structuralreplace with...

CVE-2026-87008 Code Graph RAG structural tools follow out-of-root symlinks

Code Graph RAG is an AI-powered knowledge graph and retrieval system for querying, understanding, and editing multi-language codebases. Prior to 0.0.589, AstGrepService in codebaserag/tools/astgrepservice.py enumerates files beneath projectroot and relies on shouldskippath in...