16 matches found
CVE-2026-116118
A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
EUVD-2026-109610
A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
CVE-2026-116118
A vulnerability exists in Z.ai Zcode versions up to 3.14.3/3.15.1 within the Sed Command Filter component. Improper neutralization of special elements allows for OS command injection , which can be triggered remotely. Public exploits for this vulnerability have been disclosed and may be used. No ...
CVE-2026-116118 Z.ai Zcode Sed Command Filter os command injection
A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
PT-2026-123165
A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public a...
CVE-2026-88755
Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository...
EUVD-2026-102905
Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository...
CVE-2026-88755
The software Z.ai ZCode v3.11.2.6792 is vulnerable to arbitrary code execution because it automatically establishes connections with MCP servers defined within a repository's workspace configuration. An attacker could potentially exploit this by tricking a user into opening a crafted repository ....
CVE-2026-88755: Improper Neutralization of Special Elements used in an OS Command
Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository...
CVE-2026-88755
Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository...
CVE-2026-88755
Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository...
PT-2026-115623
Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository...
Beijing Zhipu Huazhang ZCode security vulnerabilities
Beijing Zhipu Huazhang ZCode v3.11.2.6792 version has a security vulnerability. This vulnerability stems from the system’s ability to automatically establish connections with MCP servers specified in the repository workspace configuration. This could allow attackers to execute arbitrary code by...
zcode-3.14.3-1.1 on GA media (moderate)
zcode-3.14.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11952-1 Rating: moderate Cross-References: CVE-2026-45736 CVSS scores: CVE-2026-45736 SUSE : 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
