VulnSocial

CVE-2026-88755

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary code via opening a crafted repository.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78CWE-200CWE-284CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-19: 110-19
Referenced assets1 URL
Full discourse1 post
  • Basant Pandey@Basant_Pandey

    @jetbrains @Zai_org Write-up with CVE-2026-111091 (Junie CLI) and CVE-2026-88755 (ZCode): https://threatfrontier.com/articles/junie-cli-zcode-mcp-config-rce-cve-2026-111091-cve-2026-88755

    0000051
    25 followersView on X

Explore more

Back to dashboard