CVE-2026-77604 | vitali87 Code Graph RAG up to 0.0.344 Paginated Branch tools.py MCPToolsRegistry.read_file file_path path traversal

November 5, 2026 Yanac

A vulnerability identified as problematic has been detected in vitali87 Code Graph RAG up to 0.0.344. This impacts the function MCPToolsRegistry.read_file of the file codebase_rag/mcp/tools.py of the component Paginated Branch. This manipulation of the argument file_path causes path traversal.

This vulnerability is handled as CVE-2026-77604. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More