CVE-2026-49986 Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`

The Cortex MCP server neuro-cortex-memory, a cross-platform persistent memory MCP, prior to version 3.17.1 treats the CLAUDEPROJECTDIR environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex developer checkout. When the openvisualizati...

MINI-7948-7G9H-6H7G

Bulletin has no description...

MINI-M6WG-VJJG-CFR4

Bulletin has no description...

MINI-2XHJ-M3WG-CG28

Bulletin has no description...

MINI-WMH4-3XCQ-R7XW

Bulletin has no description...

MINI-6V73-H6XG-MHP7

Bulletin has no description...

MINI-HVQ7-R5G7-H9J9

Bulletin has no description...

MINI-JJ4Q-F9G4-FVGC

Bulletin has no description...

MINI-HRJH-G5XJ-XPWV

Bulletin has no description...

MINI-FW5Q-P9QV-QGCW

Bulletin has no description...

MINI-9XFX-MQR2-W68X

Bulletin has no description...

MINI-5JG2-5PFH-J3GV

Bulletin has no description...

MINI-WQ6G-WGF7-7PJX

Bulletin has no description...

MINI-RH4M-WP6H-58H3

Bulletin has no description...

MINI-4VRC-PG3H-Q82C

Bulletin has no description...

MINI-5R7H-VPMP-J4QM

Bulletin has no description...

MINI-M5H7-65VH-PC9P

Bulletin has no description...

MINI-FCVF-VV5V-H5JF

Bulletin has no description...

MINI-J3CX-PV65-3VCW

Bulletin has no description...

MINI-4XCR-4VQ3-2F98

Bulletin has no description...