CVE-2026-88939 — knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke…
Published: 2026-09-10 · CVSS: 8.7 · CVSS 4.0
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7