Skip to content
OpenAdvisories

Package · npm

@grackle-ai/plugin-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-f9ff-5x35-7gfw

    Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)

    ## Summary Authorization for scoped (agent) MCP callers is enforced **inline, per tool**, and is applied inconsistently — several mutating tools silently omit the ancestry/workspace check that their siblings perform. Because the MCP server authenticates all o…

    @grackle-ai/mcp @grackle-ai/plugin-core @grackle-ai/auth npm