CVE-2026-87008

The Code Graph RAG system (prior to version 0.0.589 ) is vulnerable to a path traversal issue where structural tools follow out-of-root symlinks . The root cause is that AstGrepService in codebase_rag/tools/ast_grep_service.py performs containment checks on unresolved lexical paths via should_ski...